Expired Certificate for wiki.znc.in

[Rabenherz112]

The Let's Encrypt certificate for the website seems to have expired, resulting in a warning when trying to visit the website.

[psychon]

Could you provide an URL and perhaps a screenshot?

For me, wiki.znc.in has a certificate that was issued on April 24th and is valid until July.

[Rabenherz112]

Sure, https://wiki.znc.in/ZNC
https://cdn.ravshort.com/rEGU2/pUVUyuLI79.png
https://cdn.ravshort.com/rEGU2/WOtAdiLA21.png

Edit:

The problem was first identified through a GitHub Action, so I don't think this is something local on my side.

[dgw]

I can observe the same problem, outdated certificate served to both me (Android tablet) and ssllabs.com over IPv4.

My connection is not IPv6 capable (sigh…) but ssllabs.com tests both, and the updated certificate was served for wiki.znc.in over IPv6 when checked.

Numerous forum and Stack Exchange threads over the years refer to various issues with nginx not using an updated certificate for some reason. Not knowing the exact setup, I won't speculate too much, but it does sound like sometimes nginx fails to replace all worker processes upon config reload. 🤷‍♂️

(These days I use Caddy for TLS, so my nginx debugging is rusty)

[psychon]

Ah, yup. Thanks for that info and sorry for not checking ipv4 / ipv6 myself. The certificate is indeed valid over IPv4:

$ curl -6 https://wiki.znc.in  
$ curl -4 https://wiki.znc.in  
curl: (60) SSL certificate problem: certificate has expired