X.509 certificate for `webhook.sailfishos.org` expired on 2023-08-06

REPRODUCIBILITY: Yes
OS VERSION: N/A
HARDWARE: N/A
UI LANGUAGE: N/A
REGRESSION: Yes

DESCRIPTION:

GitHub states:

We couldn’t deliver this payload: tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2023-09-12T00:02:32Z is after 2023-08-06T15:30:37Z

The SailfishOS-OBS states:

Files could not be expanded: service error: requests.exceptions.SSLError: HTTPSConnectionPool(host=‘webhook.sailfishos.org’, port=443): Max retries exceeded with url: /webhook/api/webhookmappings/?project=home%3Aolf%3Aharbour-storeman%3Acd&obs=mobs&package=harbour-storeman-sfos3.1 (Caused by SSLError(SSLError(1, u’[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)’),))

service webhook failed:
webhook waiting for lock
webhook obtained lock
Fetching old whm
{‘project’: ‘home:olf:harbour-storeman:cd’, ‘obs’: ‘mobs’, ‘package’: ‘harbour-storeman-sfos3.1’}

Firefox states:

Web sites prove their identity via certificates, which are valid for a set time period. The certificate for webhook.sailfishos.org expired on 06/08/2023.

Error code: SEC_ERROR_EXPIRED_CERTIFICATE

PRECONDITIONS:

Have a webhook configured for a package at the SailfishOS-OBS.

STEPS TO REPRODUCE:

Manually trigger building the package.

EXPECTED RESULT:

Package is built.

ACTUAL RESULT:

Package is not built, instead the aforementioned error message is emitted.

MODIFICATIONS:

None.

ADDITIONAL INFORMATION:

@vige and @keto, this is very similar to X.509 certificate for webhook.sailfishos.org expired on 2023-04-30 less than half a year ago. It might be better to obtain longer running X.509 certificates.

May also be of interest for @lbt and maybe @mal.

4 Likes

The certificate has now been updated. The auto-renewal does not seem to be working as expected, we will look into that.

7 Likes

Thank you, now works as expected.

The auto-renewal does not seem to be working as expected, we will look into that.

Thanks & good luck.