Certificate Errors?

[kuruption]

Been seeing this since yesterday... relatively new FreeNAS install too (i.e. this past weekend). And I understand the need to reach out for update_check.py, but why is manage.py reaching out to ixsystems.com?

Jun 22 22:30:22 nas manage.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'subject': ((('commonName', u'www.ixsystems.com'),),), 'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'version': 3L, 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 22 22:30:22 nas manage.py: [freenasOS.Configuration:638] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'subject': ((('commonName', u'www.ixsystems.com'),),), 'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'version': 3L, 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 23 04:06:06 nas update_check.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'version': 3L, 'subject': ((('commonName', u'www.ixsystems.com'),),), 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 23 06:12:43 nas manage.py: [freenasOS.Configuration:624] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'subject': ((('commonName', u'www.ixsystems.com'),),), 'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'version': 3L, 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}
Jun 23 06:12:43 nas manage.py: [freenasOS.Configuration:638] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate (hostname mismatch) {'OCSP': (u'http://ocsp.int-x3.letsencrypt.org/',), 'notBefore': u'Jun 22 18:51:00 2016 GMT', 'serialNumber': u'03F65B8BAC803C4150C5F62313F185EEB68C', 'subject': ((('commonName', u'www.ixsystems.com'),),), 'subjectAltName': (('DNS', 'ixsystems.com'), ('DNS', 'www.ixsystems.com')), 'notAfter': 'Sep 20 18:51:00 2016 GMT', 'caIssuers': (u'http://cert.int-x3.letsencrypt.org/',), 'version': 3L, 'issuer': ((('countryName', u'US'),), (('organizationName', u"Let's Encrypt"),), (('commonName', u"Let's Encrypt Authority X3"),))}

 

[dlavigne]

Looks like this has been reported as https://bugs.freenas.org/issues/16065.

 

[Spearfoot]

Looks like this has been reported as https://bugs.freenas.org/issues/16065.

Odd, I reported the bug - but I can't view it! I get error: 403 "You are not authorized to access this page."

 

[dlavigne]

It looks like it was moved to the web project so that the sysadmin can fix the cert issue. Unfortunately, only the web team and admins can view those bugs...

 

[David3D]

Came in to work today, did my morning check and as I skimmed, all I saw was "Let's Encrypt" repeated down the list and a little bit of poo came out.

Lucky it's not serious!

 

[Mirfster]

Came in to work today, did my morning check and as I skimmed, all I saw was "Let's Encrypt" repeated down the list and a little bit of poo came out.

Lucky it's not serious!

Worried your were going to have to cough up your BitCoin for ransom? ;)

 

[David3D]

Worried your were going to have to cough up your BitCoin for ransom? ;)

Not going to lie. It did cross my mind! But I have a full daily backup, an hourly incremental plus offsite crashplan incremental, so I think among those, I could have recovered OK. Haha.

 

[Silvan Burch]

well what to do atm? not install any update till the problem is resolved?

cheers

 

[Mirfster]

well what to do atm? not install any update till the problem is resolved?

If it ain't broke don't fix it... ;)
I would hold off at least for now, guessing this will get resolved pretty quickly (if not already)...

 

[Mirfster]

FYI, it was stated that the Certification Issue was resolved in this thread so you may want to give it another go and see.

 

[Silvan Burch]

yeah, seems resolved.

thanks!

 

[David3D]

Looks like it's back again! Micro pre-realisation heart attacks all 'round.