Author Topic: Help! Cannot get rid of expired SSL certificates.  (Read 4605 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
Help! Cannot get rid of expired SSL certificates.
« on: February 25, 2021, 01:22:24 AM »
Keep having issue with iOS devices stating that my certificate is expired.

server: mail.azskin.com on Centos 8

If you use the SSL checkers used by CWP7 everything is listed as fine.

https://www.checktls.com/TestReceiver

if you put in my server it states that 1 out of 3 of the certificates is expired. Unsure how to remove that certificate.

Offline
****
Re: Help! Cannot get rid of expired SSL certificates.
« Reply #1 on: March 05, 2021, 12:49:06 AM »
Use the autossl option in CWP, to renew the certficate for azskin.com, and make sure you check the mail option as additional domains.

It seems that when the cert renewed, it did not update postfix with the new certificate.
Google Hangouts:  rcschaff82@gmail.com

Offline
****
Re: Help! Cannot get rid of expired SSL certificates.
« Reply #2 on: March 05, 2021, 12:56:29 AM »
Just saw a similar post.  Before doing anything else, try restarting postfix.  It may not have picked up the new certificate if it hasn't been reloaded/restarted.
Google Hangouts:  rcschaff82@gmail.com

Offline
*
Re: Help! Cannot get rid of expired SSL certificates.
« Reply #3 on: March 08, 2021, 11:00:03 PM »
Thanks for the helped.

I have tried those options and retried them again.

Still listing that 1 of the 2 certificates from the MX is expired.

Went updating the certificate it updated the 3rd certificate for the CA root store.

Offline
****
Re: Help! Cannot get rid of expired SSL certificates.
« Reply #4 on: March 08, 2021, 11:42:31 PM »
The certificate that is expired is your domains certificate.  You can check /root/.acme.sh/ for log files to find out why your cert is not renewing.
Google Hangouts:  rcschaff82@gmail.com