MIME-Version: 1.0
References: 
 <CAB_5SReU8qC80UYd6GmWNxi5tJCJvJ_FUUnVq-S5VpB8aULDaA@mail.gmail.com>
In-Reply-To: 
 <CAB_5SReU8qC80UYd6GmWNxi5tJCJvJ_FUUnVq-S5VpB8aULDaA@mail.gmail.com>
From: Magnus Hagander <magnus@hagander.net>
Date: Fri, 8 Oct 2021 17:42:00 +0200
Message-ID: 
 <CABUevEz8C2Kx14Rf0hfDAnBVwHkcxnp0a6SC1znM5ZLUScFeQA@mail.gmail.com>
Subject: Re: Expired cert
To: Jim Mlodgenski <jimmy76@gmail.com>
Cc: PostgreSQL WWW <pgsql-www@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="0000000000001403dd05cdd93946"
Archived-At: 
 <https://www.postgresql.org/message-id/CABUevEz8C2Kx14Rf0hfDAnBVwHkcxnp0a6SC1znM5ZLUScFeQA%40mail.gmail.com>
Precedence: bulk

--0000000000001403dd05cdd93946
Content-Type: text/plain; charset="UTF-8"

On Fri, Oct 8, 2021 at 5:27 PM Jim Mlodgenski <jimmy76@gmail.com> wrote:

> It looks like Let's Encrypt needs to be nudge on one of the servers
>

More to the point, your client needs a nudge.  The certificate has not
expired, but you are using a version of OpenSSL that's terribly out of
date. All (or most at least? But I think all) non-EOL distros should do
that by default if you just apply their updates. See for example
https://letsencrypt.org/2021/10/01/cert-chaining-help.html and
https://letsencrypt.org/docs/certificate-compatibility/

-- 
 Magnus Hagander
 Me: https://www.hagander.net/ <http://www.hagander.net/>
 Work: https://www.redpill-linpro.com/ <http://www.redpill-linpro.com/>

--0000000000001403dd05cdd93946
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Fri, Oct 8, 2021 at 5:27 PM Jim Ml=
odgenski &lt;<a href=3D"mailto:jimmy76@gmail.com">jimmy76@gmail.com</a>&gt;=
 wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px =
0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">It looks=
 like Let&#39;s Encrypt needs to be nudge on one of the servers<br></blockq=
uote><div><br></div><div>More to the point, your client needs a nudge.=C2=
=A0 The certificate has not expired, but you are using a version of OpenSSL=
 that&#39;s terribly out of date. All (or most at least? But I think all) n=
on-EOL distros should do that by default if you just apply their updates. S=
ee for example=C2=A0<a href=3D"https://letsencrypt.org/2021/10/01/cert-chai=
ning-help.html">https://letsencrypt.org/2021/10/01/cert-chaining-help.html<=
/a> and=C2=A0<a href=3D"https://letsencrypt.org/docs/certificate-compatibil=
ity/">https://letsencrypt.org/docs/certificate-compatibility/</a></div><div=
><br></div></div>-- <br><div dir=3D"ltr" class=3D"gmail_signature"><div dir=
=3D"ltr"><div>=C2=A0Magnus Hagander<br>=C2=A0Me: <a href=3D"http://www.haga=
nder.net/" target=3D"_blank">https://www.hagander.net/</a><br>=C2=A0Work: <=
a href=3D"http://www.redpill-linpro.com/" target=3D"_blank">https://www.red=
pill-linpro.com/</a></div></div></div></div>

--0000000000001403dd05cdd93946--