Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

cert_status always returns EXPIRED #1047

Closed
markymarrow opened this issue Aug 7, 2023 · 1 comment · Fixed by #1081
Closed

cert_status always returns EXPIRED #1047

markymarrow opened this issue Aug 7, 2023 · 1 comment · Fixed by #1081
Assignees
@buchdag
Labels
kind/bug Issue reporting a bug

Comments

@markymarrow
Copy link

running

docker exec acme-companion /app/cert_status

always returns EXPIRED, even for a newly created cert

##### Certificate status #####
/etc/nginx/certs/xxx/fullchain.pem: EXPIRED
Certificate was issued by R3
Certificate was valid until Nov  4 17:25:02 2023 GMT
Subject Name:
- xxx
Certificate is used by the following domain(s):
- xxx
##############################

I believe this may be due to the use of

openssl verify -CAfile <fullchain.pem> <cert.pem>

instead of

openssl verify -untrusted <fullchain.pem> <cert.pem>

as suggested here:
https://community.letsencrypt.org/t/how-to-verify-le-cert-using-openssl/177679

acme-companion image version

Info: running acme-companion version v2.2.8-6-g63176c2
@buchdag
Copy link
Member

buchdag commented Aug 8, 2023

I'll try to look into this this week, thanks for the heads up.

@buchdag buchdag self-assigned this Dec 12, 2023
@buchdag buchdag mentioned this issue Dec 25, 2023
Merged
@buchdag buchdag added the kind/bug Issue reporting a bug label Dec 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@buchdag buchdag

Labels
kind/bug Issue reporting a bug
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

fix: don't display LE certificate as erroneously expired nginx-proxy/acme-companion
2 participants
@buchdag @markymarrow