Günther J. Niederwimmer
2017-Jul-08 11:11 UTC
[CentOS] certificate for www.xxxx.xx has expired ?? (hostname)
Hello, I found this Morning a Message in my Logs, that is new for me and I never seen this before? Is this a Error in the Certificate System?? The certificate for www.example.at has expired Datum: 08.07.17 06:31 Von: root <gjn+www at example.at> An: gjn+www at example.at ################# SSL Certificate Warning ################ Certificate for hostname 'www.example.at', in file (or by nickname): /etc/pki/tls/certs/localhost.crt The certificate needs to be renewed; this can be done using the 'genkey' program. Browsers will not be able to correctly connect to this web site using SSL until the certificate is renewed. ########################################################## Generated by certwatch(1) what is the best way to correct this Problem? -- mit freundlichen Gr?ssen / best regards, G?nther J. Niederwimmer
Pete Biggs
2017-Jul-08 12:11 UTC
[CentOS] certificate for www.xxxx.xx has expired ?? (hostname)
> > I found this Morning a Message in my Logs, that is new for me and I never seen > this before? > > Is this a Error in the Certificate System??No, it means that the SSL certificate has expired - they only have a limited validity and these default certificates are generated at install time with a 365 day life.> > The certificate for www.example.at has expired > Datum: 08.07.17 06:31 > Von: root <gjn+www at example.at> > An: gjn+www at example.at > ################# SSL Certificate Warning ################ > > Certificate for hostname 'www.example.at', in file (or by nickname): > /etc/pki/tls/certs/localhost.crt > > The certificate needs to be renewed; this can be done > using the 'genkey' program. > > Browsers will not be able to correctly connect to this > web site using SSL until the certificate is renewed. > > ########################################################## > Generated by certwatch(1) > > what is the best way to correct this Problem?Create a new certificate. If you don't use https (which is probably likely if you didn't know about certificate lifetimes), then you can ignore the warning (although it will never stop telling you about it). The warning is issued by /etc/cron.daily/certwatch and you can put 'NOCERTWATCH=yes' in /etc/sysconfig/httpd to disable the warnings. P.
Scott Robbins
2017-Jul-08 14:06 UTC
[CentOS] certificate for www.xxxx.xx has expired ?? (hostname)
On Sat, Jul 08, 2017 at 01:11:38PM +0200, G?nther J. Niederwimmer wrote:> Hello, > > I found this Morning a Message in my Logs, that is new for me and I never seen > this before? > > Is this a Error in the Certificate System?? > > The certificate for www.example.at has expired > Datum: 08.07.17 06:31 > Von: root <gjn+www at example.at> > An: gjn+www at example.at > ################# SSL Certificate Warning ################ > > Certificate for hostname 'www.example.at', in file (or by nickname): > /etc/pki/tls/certs/localhost.crt > > The certificate needs to be renewed; this can be done > using the 'genkey' program. > > Browsers will not be able to correctly connect to this > web site using SSL until the certificate is renewed. > > ########################################################## > Generated by certwatch(1)It means, as it says, that the certificate for the site has expired. I'm guessing you purchased a cert, or maybe used LetsEncrypt, which expires ever 3 months. You will have to renew the certificate. -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6