Solved Let’s encrypt TLS-ALPN-01 certificates

[AlanRamsay]

So Let’s Encrypt have issued notice that all certificates issued via the https challenge TLS-ALPN-01 will be revoked on Friday at 4pm GMT.

As 3CX is secured by Let’s Encrypt, can we have some guidance as to if this challenge has been used (I would guess it has a very strong chance of being utilised) and then how we can go about manually doing a force renew on certificates from the command line.

Obviously given the short time window before revocation occurs and the fact that the web server will likely need to be restarted for the updated certificate to take place, a response and advice from 3CX today would be ideal.

 

[ChrisC_3CX]

As 3CX is secured by Let’s Encrypt, can we have some guidance as to if this challenge has been used (I would guess it has a very strong chance of being utilized) and then how we can go about manually doing a force renew on certificates from the command line.

We've looked into this and I can confirm that we do not use the TLS-ALPN-01 validation method so there's no need to worry as 3CX Instances are unaffected and no action is needed.

 

[AlanRamsay]

We've looked into this and I can confirm that we do not use the TLS-ALPN-01 validation method so there's no need to worry as 3CX Instances are unaffected and no action is needed.

Hi Chris,

Thanks for the reply; for transparency can you advise the process that you do use for the letsencrypt certificates? This way if there is an issue similar to this in the future we will be in a better place to answer our customers queries.

Thanks

 

[NickD_3CX]

Hi!

The method we use is the DNS-01 challenge.

 

[AlanRamsay]

Hi!

The method we use is the DNS-01 challenge.

Great - thank you