Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse

Cloudron Forum

Apps | Demo | Docs | Install

Mail Certificates do not get renewed.

Scheduled Pinned Locked Moved Unsolved Support
mailcertificates
16 Posts 10 Posters 697 Views
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • L Offline
    L Offline
    Leggias
    replied to nebulon on last edited by
    #3

    @nebulon Thank you for your quick reply. It is working again!

    Thanks 🙂

    1 Reply Last reply
    0
  • d19dotcaD Offline
    d19dotcaD Offline
    d19dotca
    wrote on last edited by
    #4

    Funny enough I just had this issue today too. Checked mail and suddenly it told me it couldn’t connect because the mail server certificate expired. Seems like a bug.

    --
    Dustin Dauncey
    www.d19.ca

    nebulonN 1 Reply Last reply
    0
  • nebulonN Online
    nebulonN Online
    nebulon Staff
    replied to d19dotca on last edited by
    #5

    @d19dotca on which Cloudron version are you on?

    d19dotcaD vladimir.dV 2 Replies Last reply
    0
  • d19dotcaD Offline
    d19dotcaD Offline
    d19dotca
    replied to nebulon on last edited by
    #6

    @nebulon I was on 6.3.5 at the time. I have since upgraded to 6.3.6.

    Restarting the mail service which resolved the issue.

    --
    Dustin Dauncey
    www.d19.ca

    1 Reply Last reply
    0
  • vladimir.dV Offline
    vladimir.dV Offline
    vladimir.d
    replied to nebulon on last edited by
    #7

    @nebulon it seems 7.2.2 is still affected. We faced with the same issue and resolved it by restating the mail service.

    L 1 Reply Last reply
    0
  • L Offline
    L Offline
    lucidfox
    replied to vladimir.d on last edited by
    #8

    I also had the same error running Cloudron 7.2.2, and restarting the mail service solved the issue.

    G 1 Reply Last reply
    0
  • G Offline
    G Offline
    guyds
    replied to lucidfox on last edited by
    #9

    Same here with Cloudron 7.2.5

    imc67I 1 Reply Last reply
    0
  • imc67I Offline
    imc67I Offline
    imc67 translator
    replied to guyds on last edited by
    #10

    @guyds @nebulon @girish after all these months its a pity that this issue is not fully solved, if it happens it has a huge user impact as they receive certificate errors on their devices.

    On 1 of my 4 Cloudrons Premium it again happens just minutes ago, the mail.domain certificate was expired at 13:00h (CEST) today. After 45 minutes I discovered myself and restarted the mail server, now the expiry date gives:

    notBefore=Jul 16 11:00:49 2022 GMT
    notAfter=Oct 14 11:00:48 2022 GMT
    

    The other 3 are giving:

    notBefore=May 24 11:05:39 2022 GMT
    notAfter=Aug 22 11:05:38 2022 GMT
    
    notBefore=May 23 23:00:54 2022 GMT
    notAfter=Aug 21 23:00:53 2022 GMT
    
    notBefore=May 24 23:01:26 2022 GMT
    notAfter=Aug 22 23:01:25 2022 GMT
    

    So it seems and looks like all 3 of them will get expired as they are not (copied???) refreshed in time?

    BTW: please remove the SOLVED label as it is definately not solved.

    girishG 1 Reply Last reply
    1
  • girishG Offline
    girishG Offline
    girish Staff
    replied to imc67 on last edited by
    #11

    @imc67 Fair enough, I have made it unsolved. I have reworked large portions of the certificate logic upcoming release, so this should definitely got solved soonish.

    G 1 Reply Last reply
    3
  • girishG girish has marked this topic as unsolved on
  • G Offline
    G Offline
    guyds
    replied to girish on last edited by
    #12

    @girish When can we expect an update that fixes this issue?
    It just happened again on one of my Cloudrons

    humptydumptyH 1 Reply Last reply
    0
  • humptydumptyH Offline
    humptydumptyH Offline
    humptydumpty
    replied to guyds on last edited by
    #13

    @guyds see this post for details https://forum.cloudron.io/post/53552

    G 1 Reply Last reply
    2
  • G Offline
    G Offline
    guyds
    replied to humptydumpty on last edited by
    #14

    @humptydumpty Thanks! Hadn't seen that post yet.

    1 Reply Last reply
    0
  • W Offline
    W Offline
    wu-lee
    wrote on last edited by
    #15

    Also just experienced this on Cloudron (v7.2.5, Ubuntu 18.04.6 LTS). I'd report this as a bug via the support panel in the Cloudron dashboard, but the "submit" button seems to be disabled even when the form is apparently filled out correctly. Therefore posting here.


    Users reported that mail wasn't syncing. This is generally not well reported in the clients - in Thunderbird, it just seems to show a spinning "busy" icon when syncing. Therefore it wasn't obvious what the cause was immediately.

    No obviously related errors in the Cloudron dashboard's mail logs, but these all seem to be SMTP related.

    Tracked down the IMAP log in the mail container, under /var/run/dovecot.log (This doesn't seem to be accessible in the UI or documented on the Cloudron site? Be great if it was!)

    This listed errors like this:

    Oct 07 08:29:44 imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=REDACTED, lip=172.18.0.9, TLS handshaking: SSL_accept() failed: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown: SSL alert number 46, session=<pGuonG3qbIhQwAEL>
    

    Validated the SSL certificate using openssl:

    openssl s_client -showcerts -connect $host:993 -servername $host > $host.certcheck
    

    This included the line:

    Verify return code: 10 (certificate has expired)
    

    I restarted the mail service.

    The SSL check then seemed included this line instead:

    Verify return code: 0 (ok)
    

    Mail syncing then seemed to work normally.

    So problem solved for now, but it might reoccur. I infer something isn't restarting the mail service correctly when the SSL cert is updated?

    Thanks!

    1 Reply Last reply
    1
  • nebulonN Online
    nebulonN Online
    nebulon Staff
    wrote on last edited by
    #16

    This should hopefully be fixed in Cloudron v7.3

    1 Reply Last reply
    1

  • Login

  • Don't have an account? Register

  • Login or register to search.
  • First post
    Last post
0
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Login

  • Don't have an account? Register

  • Login or register to search.