[Incident] Certificates have expired!

VoltServer
1

When trying to access my VoltCloud application, I suddenly get a message that the certificate has expired.

Here is an output copied from cURL (other tools will complain as well)

curl --verbose https://postman-1628149292.volt.live/
*   Trying 2600:3c03::f03c:91ff:fec8:fc22...
* TCP_NODELAY set
* Connected to postman-1628149292.volt.live (2600:3c03::f03c:91ff:fec8:fc22) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/cert.pem
  CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, Server hello (2):
* SSL certificate problem: certificate has expired
* stopped the pause stream!
* Closing connection 0
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.
HTTPS-proxy has similar options --proxy-cacert and --proxy-insecure.

May that be?

PS: all my VoltCloud applications do no longer work! They all fail because of expired certificates - please correct ASAP!!!

2

We recently updated our certificates to use Let’s Encrypt, so that is probably the cause of the issue.

I have reproduced this here. We’re on it.

3

Certificates should be fixed. We had to update thousands of projects.

Please let us know if you encounter more problems.

4

Well,

but this also means that thousands of projects suffered from this problem for several hours and may have to explain s.th. to their customers.

Anyway, thanks for your effort - everything seems to work again now.

5

The volt.live domain is meant for testing only. If you have a customer facing app, I would highly suggest using a custom domain, which would not have been affected by this issue.

6

That is good to know, indeed!