LetsEncrypt doing something odd?

[Craig Knights]

So both Chrome and Safari say the cert has expired..  but the expiry is a month away?

NET::ERR_CERT_DATE_INVALID
Subject: kamarweb.mcglashan.school.nz
Issuer: R3
Expires on: 25 Oct 2021
Current date: 30 Sept 2021

anyone?

Craig

[Simon Wright]

Yeah i had the other week.

It's up to date on iis, but on any computer it would have the expired cert.

Can't remember how i resolved it, it was a lot of fumbling. There was an update to the Certify The Web app, so I applied that, re-ran obtaining the cert, checked IIs as using the correct new one, and restarted the server.

Regards,

Simon Wright

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.
To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa2V7b_kDBucQ-dtETOg75jdDUNTQH03tGnGmCuDWf8%2BuQ%40mail.gmail.com.

DISCLAIMER
This e-mail is intended for the addressee only and may contain information which is subject to legal privilege. This e-mail message and accompanying data may contain information that is confidential and subject to privilege. Its contents are not necessarily the official view Otago Boys’ High School or communication of the Otago Boys’ High School. If you are not the intended recipient you must not use, disclose, copy or distribute this e-mail or any information in, or attached to it. If you have received this e-mail in error, please contact the sender immediately or return the original message to Otago Boys’ High School by e-mail, and destroy any copies. Otago Boys’ High School does not accept any liability for changes made to this e-mail or attachments after sending.

[David Keenleyside]

I believe you may be running into the following issue:

https://techcrunch.com/2021/09/21/lets-encrypt-root-expiry/

More in-depth explanation:

https://scotthelme.co.uk/lets-encrypt-old-root-expiration/

Even more in-depth, with exact certificate that is causing above issue:

https://scotthelme.co.uk/lets-encrypt-to-transition-to-isrg-root/

"This is the final date by which everyone must have moved over to using a certificate chain that chains to the ISRG root certificate if you're going to continue to use Let's Encrypt certificates. The old cross-signed X3 and the new cross-signed X3 will have both expired by then and the chain is definitely useless once the root has expired. If you still have legacy client concerns by September 30th, 2021, these clients won't have been updated for over 4.5 years and you will need to convince them to update if they want to continue to be able to access your site/service."

*checks current date* Looks like we have a winner.

Regards,

David.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAEJps9p%3DO6nOy4ZBPdo4_xNf_A6nLDNyzT2n4SDOnn3sRCagbw%40mail.gmail.com.

[Craig Knights]

Yes looks like you are right.

thanks,

Craig

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAD9kU0avWTd2T9BSzCcFqBsJPZ9Uo0nkHH2Dv_rSOv2gRiRF%2Bw%40mail.gmail.com.

[Peter Lambrechtsen]

I suspect a lot of the internet will have problems with this once the certificate expires in the next few hours.

The main problem is if you don't have the new ISIG X1 loaded into your root chain of trust, and if the intermediate LES R3 isn't loaded either. This should have happened ages ago, but the old certs may not have been removed:

https://letsencrypt.org/certificates/

These two files should fix everything loading them into the root CA Certificates. If you have AD it is very straightforward, unmanaged devices, not so much:

https://letsencrypt.org/certs/isrgrootx1.der

https://letsencrypt.org/certs/lets-encrypt-r3.der

Interesting to see how much does stop working or weird "Certificate has expired" warnings come up that folks dutifully ignore.

Happy days.

Peter

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa0zEoRd%3DGZRWsibc%3DP1D3nKTgRp%2B2JgT6ADQ-ATeFNmqw%40mail.gmail.com.

[Craig Knights]

Ok. Sorted it. Thanks for the help everyone.

[Craig Knights]

I don't know if anyone else will have this problem...but anyway..

This is on Windows Server.

So in "Manage User Certificates", I removed the expiring tomorrow DST X3 certs, they were in a couple of the folders, only takes 30sec to look in them all.   

I had already run a manual cert renewal in addition to the scheduled one, so I guess that's why the new ones were already there.

That still didn't help, even after clearing the Cache on my test browser and turning off the web services for Kamar

So I nicely shut down the kamar filemaker and rebooted the VM.

Fixed.

thanks all,
Craig

[Alistair Baird]

Thanks Craig, I was heading in that direction. Our Wifi has hung up a lot of windows clients, hopefully this will get us back on track.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.
To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa3Lxg0uuMzt_zOYtf-qO5wv%2BteE_tkdQPqAyMgqwXGavQ%40mail.gmail.com.

--

Alistair Baird

IT Manager

St Peters College 

p 06 354 4198

m 021 482 937

e bai...@stpeterspn.school.nz

[Tracy Briscoe]

This morning we had problems with Macs accessing our websites, but not windows devices.

 

It turned out that even though the webservers had new and old certificates for the R3 Intermediate CA, http.sys (which IIS uses to actually server the web pages) had cached the old certificate and was giving that out to clients as the path to the Root CA.

 

To fix the problem I had to either:

• Reboot the server
• Rebind a certificate in IIS

Doing a IIS reset didn’t cause http.sys to refresh it’s cache.

 

It is interesting that the problem only affected Macs. I’m guessing that windows devices had cached the newer R3 intermediate CA certificate, and used that to validate our stpeters.school.nz certificate, whereas the Macs only used what had been provided to it via the webserver.

 

Tracy Briscoe
Senior Network and Systems Engineer

St Peter’s School, Cambridge

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CACJd5cGZSAfy3uihJxyPBf6vnFouMB7euUffEZBR%2BgrioXzWAg%40mail.gmail.com.

Note: This communication may contain privileged and confidential information intended only for the addressee named above. Any views or opinions presented are solely those of the author. If you have received this message in error, we request you delete the message and notify the sender. Please do not distribute, copy or disclose any information. This e-mail has been scanned for viruses but all liability for viruses or similar in any attachment or message is excluded.

St Peter's, Cambridge, New Zealand
Telephone: +64 7 827 9899
Website: www.stpeters.school.nz

Please consider the environment before printing this email

[Craig Knights]

Interesting.  The other one that came up is our onsite accessit library webapp

So I removed the old certs as in my previous email..  but it doesn't use IIS.  It uses Apache Tomcat.

So on this page: https://support.zoho.com/portal/accessitsoftware/en/kb/articles/windows-generate-lets-encrypt-ssl-certificate

I re-ran the deployment task.  You can't renew the cert, as the certify client says it's not near expiring..

thanks,

Craig

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/779a7e6ebf934c228089b88e3834d665%40stpeters.school.nz.

[Craig Knights]

Has anyone got a cheatsheet for the filemaker letsencrypt cert?

[Craig Knights]

nevermind, got it going.  removed the cert from filemaker, then re-ran the powershell script, which died right at the end.. but had already done it's thing..  so reopened the db's and all good.

who ordered the ssl fun for the last day of the term?

cheers,

Craig

[Nick Steenson]

Is that working again now? It stopped working a while back for us and I was told to go without until it's fixed...

Nick

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa22HbYYC4rZmz1LDmMRdboGJssb5MRhhGpfkAZUeADG5A%40mail.gmail.com.

--

Nick Steenson IT Manager
Mount Aspiring College

T +64 (0) 3 443 0463 (Ext 222) E stee...@mtaspiring.school.nz     I...@mtaspiring.school.nz

A 101 Plantation Rd, Wanaka, NZ, 9305 W www.mountaspiringcollege.nz

 

[Kevin Campbell]

Just had this hit one of our Fortigates...

[Craig Knights]

the Filemaker-LetsEncrypt-Win-master bluefeathergroup.com one?

i had it there from when i set it up in term1 hols

it worked enough

cheers,

Craig

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CA%2B9sU%3DSYzVEFh05AUSxWB1_X-9L8rNyboQUbFh3GvteS%3DGEw8w%40mail.gmail.com.

[Peter Lambrechtsen]

You may need to make sure the new X3 certificate is loaded into your root Certificate Authority chain, and ideally the self signed X1 one too:

From here: https://letsencrypt.org/certificates/

The self signed X1: https://letsencrypt.org/certs/isrgrootx1.der

And New Root X3: https://letsencrypt.org/certs/trustid-x3-root.pem.txt

With those two certs loaded all weird problems should go away.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa3cT4x2vKaZDV_2GiuJmqWd%2BPFQHbK1JB6FiuLCeOJALA%40mail.gmail.com.

[Alistair Baird]

And you may need to reboot the server for good measure. Even though I had all our certs updated and FM web worked, this morning the webserver and Apps aren't working, but the clients are all happy. I'm planning a reboot Monday. Our wifi played up only for Windows clients, all others worked, but worked after a reboot. Shutting down relevant services didn't seem enough.

On Friday, 1 October 2021, Peter Lambrechtsen <pe...@crypt.nz> wrote:

You may need to make sure the new X3 certificate is loaded into your root Certificate Authority chain, and ideally the self signed X1 one too:

From here: https://letsencrypt.org/certificates/

The self signed X1: https://letsencrypt.org/certs/isrgrootx1.der

And New Root X3: https://letsencrypt.org/certs/trustid-x3-root.pem.txt

With those two certs loaded all weird problems should go away.

On Fri, Oct 1, 2021 at 11:24 AM Craig Knights <craig....@gmail.com> wrote:

the Filemaker-LetsEncrypt-Win-master bluefeathergroup.com one?

i had it there from when i set it up in term1 hols

it worked enough

cheers,

Craig

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa2V7b_kDBucQ-dtETOg75jdDUNTQH03tGnGmCuDWf8%2BuQ%40mail.gmail.com.

 

 

DISCLAIMER
This e-mail is intended for the addressee only and may contain information which is subject to legal privilege. This e-mail message and accompanying data may contain information that is confidential and subject to privilege. Its contents are not necessarily the official view Otago Boys’ High School or communication of the Otago Boys’ High School. If you are not the intended recipient you must not use, disclose, copy or distribute this e-mail or any information in, or attached to it. If you have received this e-mail in error, please contact the sender immediately or return the original message to Otago Boys’ High School by e-mail, and destroy any copies. Otago Boys’ High School does not accept any liability for changes made to this e-mail or attachments after sending.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAEJps9p%3DO6nOy4ZBPdo4_xNf_A6nLDNyzT2n4SDOnn3sRCagbw%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAD9kU0avWTd2T9BSzCcFqBsJPZ9Uo0nkHH2Dv_rSOv2gRiRF%2Bw%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa0zEoRd%3DGZRWsibc%3DP1D3nKTgRp%2B2JgT6ADQ-ATeFNmqw%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CACJd5cGZSAfy3uihJxyPBf6vnFouMB7euUffEZBR%2BgrioXzWAg%40mail.gmail.com.

Note: This communication may contain privileged and confidential information intended only for the addressee named above. Any views or opinions presented are solely those of the author. If you have received this message in error, we request you delete the message and notify the sender. Please do not distribute, copy or disclose any information. This e-mail has been scanned for viruses but all liability for viruses or similar in any attachment or message is excluded.

St Peter's, Cambridge, New Zealand
Telephone: +64 7 827 9899
Website: www.stpeters.school.nz

Please consider the environment before printing this email

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/779a7e6ebf934c228089b88e3834d665%40stpeters.school.nz.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa22HbYYC4rZmz1LDmMRdboGJssb5MRhhGpfkAZUeADG5A%40mail.gmail.com.

--

Nick Steenson IT Manager
Mount Aspiring College

T +64 (0) 3 443 0463 (Ext 222) E stee...@mtaspiring.school.nz     I...@mtaspiring.school.nz

A 101 Plantation Rd, Wanaka, NZ, 9305 W www.mountaspiringcollege.nz

 

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CA%2B9sU%3DSYzVEFh05AUSxWB1_X-9L8rNyboQUbFh3GvteS%3DGEw8w%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa3cT4x2vKaZDV_2GiuJmqWd%2BPFQHbK1JB6FiuLCeOJALA%40mail.gmail.com.

--

You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CACJd5cEstqBceDha9MSFaNeCByV9Kj7stPiFTaytRWD10mCchA%40mail.gmail.com.

[Craig Knights]

Yes Alistair, I had the same this morning after getting the web working yesterday.  I suspect the web to filemaker connection broke during overnight maintenance.  Basically the cert also needed re-imported to Filemaker after yesterday's fixes.

On Fri, Oct 1, 2021 at 12:28 PM Alistair Baird <bai...@stpeterspn.school.nz> wrote:

And you may need to reboot the server for good measure. Even though I had all our certs updated and FM web worked, this morning the webserver and Apps aren't working, but the clients are all happy. I'm planning a reboot Monday. Our wifi played up only for Windows clients, all others worked, but worked after a reboot. Shutting down relevant services didn't seem enough.

On Friday, 1 October 2021, Peter Lambrechtsen <pe...@crypt.nz> wrote:

You may need to make sure the new X3 certificate is loaded into your root Certificate Authority chain, and ideally the self signed X1 one too:

From here: https://letsencrypt.org/certificates/

The self signed X1: https://letsencrypt.org/certs/isrgrootx1.der

And New Root X3: https://letsencrypt.org/certs/trustid-x3-root.pem.txt

With those two certs loaded all weird problems should go away.

On Fri, Oct 1, 2021 at 11:24 AM Craig Knights <craig....@gmail.com> wrote:

the Filemaker-LetsEncrypt-Win-master bluefeathergroup.com one?

i had it there from when i set it up in term1 hols

it worked enough

cheers,

Craig

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa2V7b_kDBucQ-dtETOg75jdDUNTQH03tGnGmCuDWf8%2BuQ%40mail.gmail.com.

 

 

DISCLAIMER
This e-mail is intended for the addressee only and may contain information which is subject to legal privilege. This e-mail message and accompanying data may contain information that is confidential and subject to privilege. Its contents are not necessarily the official view Otago Boys’ High School or communication of the Otago Boys’ High School. If you are not the intended recipient you must not use, disclose, copy or distribute this e-mail or any information in, or attached to it. If you have received this e-mail in error, please contact the sender immediately or return the original message to Otago Boys’ High School by e-mail, and destroy any copies. Otago Boys’ High School does not accept any liability for changes made to this e-mail or attachments after sending.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAEJps9p%3DO6nOy4ZBPdo4_xNf_A6nLDNyzT2n4SDOnn3sRCagbw%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAD9kU0avWTd2T9BSzCcFqBsJPZ9Uo0nkHH2Dv_rSOv2gRiRF%2Bw%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa0zEoRd%3DGZRWsibc%3DP1D3nKTgRp%2B2JgT6ADQ-ATeFNmqw%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CACJd5cGZSAfy3uihJxyPBf6vnFouMB7euUffEZBR%2BgrioXzWAg%40mail.gmail.com.

Note: This communication may contain privileged and confidential information intended only for the addressee named above. Any views or opinions presented are solely those of the author. If you have received this message in error, we request you delete the message and notify the sender. Please do not distribute, copy or disclose any information. This e-mail has been scanned for viruses but all liability for viruses or similar in any attachment or message is excluded.

St Peter's, Cambridge, New Zealand
Telephone: +64 7 827 9899
Website: www.stpeters.school.nz

Please consider the environment before printing this email

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/779a7e6ebf934c228089b88e3834d665%40stpeters.school.nz.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa22HbYYC4rZmz1LDmMRdboGJssb5MRhhGpfkAZUeADG5A%40mail.gmail.com.

--

Nick Steenson IT Manager
Mount Aspiring College

T +64 (0) 3 443 0463 (Ext 222) E stee...@mtaspiring.school.nz     I...@mtaspiring.school.nz

A 101 Plantation Rd, Wanaka, NZ, 9305 W www.mountaspiringcollege.nz

 

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CA%2B9sU%3DSYzVEFh05AUSxWB1_X-9L8rNyboQUbFh3GvteS%3DGEw8w%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa3cT4x2vKaZDV_2GiuJmqWd%2BPFQHbK1JB6FiuLCeOJALA%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CACJd5cEstqBceDha9MSFaNeCByV9Kj7stPiFTaytRWD10mCchA%40mail.gmail.com.

--

Alistair Baird

IT Manager

St Peters College 

p 06 354 4198

m 021 482 937

e bai...@stpeterspn.school.nz

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAKQ0vHqAf0UErcX9KTyodyU8Mb%3DXws2pgXDJfXyeFSk5jUSMgQ%40mail.gmail.com.

[Tracy Briscoe]

Yes I had phase two this morning.

 

The Lets Encrypt Root Certificate is in Microsoft’s online CA store, which Windows will automatically download trusted CA certificates from.

The problem was that we follow best practice, and don’t give our servers unlimited Internet access, and hence our servers hadn’t downloaded and trusted ‘ISRG Root X1’ as a Root CA.

When I restarted our reverse proxy server the AD FS proxy wouldn’t come up until I manually added ISRG Root X1 to the trusted CA store.

 

Not the problem I wanted to come into today.

 

Regards,

 

Tracy Briscoe
Senior Network and Systems Engineer

St Peter’s School, Cambridge

 

From: techies-f...@googlegroups.com <techies-f...@googlegroups.com> On Behalf Of Peter Lambrechtsen
Sent: Thursday, 30 September 2021 10:18 am
To: techies-f...@googlegroups.com
Subject: Re: [techies-for-schools] LetsEncrypt doing something odd?

 

I suspect a lot of the internet will have problems with this once the certificate expires in the next few hours.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CACJd5cGZSAfy3uihJxyPBf6vnFouMB7euUffEZBR%2BgrioXzWAg%40mail.gmail.com.

[Jake Wills]

We had the same problem this morning as well... re-import of certificate and restart of FileMaker server fixed it for us.

But looks like Xero may have been caught out with the same thing as well:

https://www.nzherald.co.nz/business/xero-suffers-major-outage-slack-stuffs-up/D4CJTO724LRWM7BSQ7PFAJ3E5U/

[Craig Knights]

ouch, looks like it.  2 million users worldwide.  ouch

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/0015280b-d355-4233-889d-9f72800b1fa0n%40googlegroups.com.

[Jake Wills]

Made me feel a lot better about my issues this morning 🤣

You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/F5Le9nmphFc/unsubscribe.
To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa0cApXWCtEHVmyy1DdGjP959tGNkYuf0ZH0FnrufZ1hcg%40mail.gmail.com.

--

Sent from my phone, so please forgive any typos.

[Craig Knights]

Booking.com seems down too!

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMCfOrwFyXpCp5ve%2BPOfWrh5TL0gMWok9EFqnS0ghkwSmOA7mQ%40mail.gmail.com.

[David Keenleyside]

If you want to follow some of the chaos, plus get a few tips along the way, #letsencrypt is trending well on Twitter:

https://twitter.com/hashtag/letsencrypt

Various companies caught out are putting up tweets with links to fixes; remember who they are, clearly it doesn't matter how much they are paid, it's a process issue.

A bit of light reading regarding the event, with a few points of interest regarding what is potentially affected which you might not have seen yet; because lockdown.

https://www.entrepreneur.com/article/388125

Note:  I'm subscribed to the letsencrypt mailing list, so this was addressed a fair while ago my end.  However, I highly recommend that if you use something, please make sure you are subscribed to their mailing list in general.  Not only will you avoid issues like today's, but you will also be apprised of security issues and urgent patches.

Regards,

David.

To view this discussion on the web visit https://groups.google.com/d/msgid/techies-for-schools/CAMueQa2%2BVSiiiUQx3uWdrdcFrUOfjGfaj-GMgAJt-1i6ZCDZag%40mail.gmail.com.