Anybody seeing this in their logs?

[BigDave]

This has been going on for two days!
I'm still on version FreeNAS-9.10-STABLE-201605240427 (64fcd8e)

Code:

Jun 22 00:00:00 freenas syslog-ng[1612]: Configuration reload request received, reloading configuration;
Jun 22 14:30:47 freenas alert.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590))
Jun 22 14:30:47 freenas alert.py: [freenasOS.Configuration:638] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590))
Jun 22 14:30:48 freenas alert.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590))
Jun 22 14:30:48 freenas alert.py: [freenasOS.Configuration:638] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590))
Jun 22 15:30:58 freenas alert.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 22 15:30:58 freenas alert.py: [freenasOS.Configuration:638] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 22 15:31:00 freenas alert.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 22 15:31:00 freenas alert.py: [freenasOS.Configuration:638] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 22 16:31:09 freenas alert.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 22 16:31:09 freenas alert.py: [freenasOS.Configuration:638] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 22 16:31:11 freenas alert.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 22 16:31:11 freenas alert.py: [freenasOS.Configuration:638] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 22 17:31:21 freenas alert.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
SNIP
18:49:05 freenas manage.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),)), 'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'subject': ((('commonName', u'www.ixsystems.com'),),), 'version': 3L}
Jun 23 18:49:05 freenas manage.py: [freenasOS.Configuration:638] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),)), 'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'subject': ((('commonName', u'www.ixsystems.com'),),), 'version': 3L}
[root@freenas] ~#

 

[Mirfster]

Think it may be related to this?: https://forums.freenas.org/index.php?threads/update-server-could-not-be-reached.26456/

 

[Spearfoot]

Think it may be related to this?: https://forums.freenas.org/index.php?threads/update-server-could-not-be-reached.26456/

Yeah, iXsystems installed a new certificate yesterday and there are problems with it:

https://forums.freenas.org/index.php?threads/certificate-errors.44349/#post-296349

 

[BigDave]

That seems to be it alright! Thanks for your feedback!
I haven't had much time for the forum lately and missed that post, so was unaware there was an issue.

 

[Jailer]

Just started for me at 9PM tonight.

 

[BigDave]

Just started for me at 9PM tonight.

You still on 9.3.1 like it says in your signature Jailer?

 

[Jailer]

Yup

 

[cyberjock]

This just got fixed. Locking this thread.