My domain is: tport.bluebiloba.com My web server is (include version): Teleport v8.1.1 git:v8.1.1-0-g8d15472 go1.17.3 The operating system my web server runs on is (include version): AlmaLinux 8.5 My hosting provider, if applicable, is: n/a I can login to a root shell on my machine (yes or n…

Which of those two commands did you use? teleport configure --acme --acme-email=user@example.com --cluster-name=tele.example.com > /etc/teleport.yaml or sudo teleport configure -o file \ --cluster-name=tele.example.com \ --public-addr=tele.example.com:443 \ --cert-file=/var/lib/telepo…

[image] Cris70: tport.bluebiloba.com Because of this: [image] Questions about Renewing before TLS-ALPN-01 Revocations Help U… Just renew your certificate.

You can double-check what @9peppe said by filling out your hostname in the tool here: https://tls-alpn-check.letsencrypt.org/

[image] Cris70: certbot 1.22.0 HEY. This issue doesn't happen with certbot. You're not following a tutorial from aws/lightsail telling you to install certbot on a bitnami image, are you?

No I'm not. But I verified that I'm affected. Also, even after renewing the certificate, the serial number (as seen by the internet) does not change. There must be something wrong with Teleport, but I still cannot understand what is it. Sorry for the noise.

[image] Cris70: There must be something wrong with Teleport, but I still cannot understand what is it. It probably needs to be told to read the new certificate. A reload should do that. (If it knows where the certificate is.)

It knows: it shows the path in the log when starting up, and it is correct. I even went as far as rebooting the server (after simply trying to restart the service, obviously), but nothing helps.

This is strange. Maybe it's making its own copy? ... or maybe it's getting its own separate certificate and it has nothing to do with the one you got with certbot. This would also explain why it was revoked in the tls-alpn-01 great revocation of 2022.

Thank you @9peppe !! I had configured Teleport since so many months that I did forget the command used. Fortunately, bash still had it in its history, so I could check that I had actually used the first command. Fixing it was just a matter of going into the yaml config file and changing from acme:…

Check that certbot renew --dry-run executes without complaining (what's listening on your port 80? haproxy? does it pass onto certbot what it needs?)

@9peppe certbot always worked as expected renewing the certificate, and that hasn't changed. Only it was previously ignored. But thank you for the heads-up! Cris

My certificate has been revoked. How and why?

Help

9peppe March 5, 2022, 3:33pm 2

Because of this:

Just renew your certificate.

Topic		Replies	Views
Net::err_cert_revoked Help	13	3421	January 30, 2022
Sec_error_revoked_certificate Help	1	1707	January 31, 2022
After the website is automatically renewed, the OCSP status of the corresponding certificate is revoked. What should I do? Help	6	1250	February 8, 2022
SSL certificate www.sportswil.no has been revoked Help	6	1160	February 17, 2022
Net::err_cert_revoked Help	2	1142	February 15, 2022

My certificate has been revoked. How and why?

Related topics