Derek Atkins
2025-Nov-13 01:47 UTC
ANNOUNCE: [MAINT] Unplanned Server Outage due to expired certs
Hi,
tl;dr: code was offline for a couple hours due to a certificate expiry.
It's been corrected and all is back now.
Long Version:
The gnucash server code runs on an infrastructure called oVirt. The infra
uses a bunch of certificates for inter-process communication as well as
cross-host authentication. Earlier today, these certificates expired.
And then the server experienced a reboot.
Normally the reboot wouldn't be a problem; there would be a 15 minute
"outage" and then everything would come back normally. However, this
time
that didn't happen. Due to the certificates expiring, the server could
not "talk to itself" and couldn't bring up the infrastructure!
I had to trick the server into thinking it was this morning, and then
bring up the services, then it brought up the engine. From there I was
able to renew all the certificates, reboot, and get the system back up and
running.
For the record, I DID have an entry in my calendar to renew the certs, but
due to personal reasons I did not execute on that. I have put in MULTIPLE
reminders for next time.
I am sorry for the inconvenience.
-derek
--
Derek Atkins 617-623-3745
derek at ihtfp.com www.ihtfp.com
Computer and Internet Security Consultant