Everything
php
Learn Community Releases The PHP Project
Home » Project » Newsgroups » php.internals » PHP Servers SSL Certificate Expiry »

PHP Servers SSL Certificate Expiry

php.internals

Derick Rethans

2 years ago
Hi All, We're aware that this has happened. The process that we set-up a three months ago with Let's Encrypt was not fully implemented. There is no need to report this again, and I will update these lists when it is addressed. It does not affect www.php.net, but it does affect: pecl.php.net pear.php.net talks.php.net master.php.net (which effects many other integrations as well) bugs.php.net and likely others. cheers, Derick

Derick Rethans

2 years ago
Dear All, pecl.php.net now has a valid SSL/TLS certificate again. And it turns out that pear.php.net was not affected. The other services do not have an updated certificate yet, but this should be rolled out in the next few days. with kind regards, Derick Rethans On Mon, 11 Sep 2023, Derick Rethans wrote:
> Hi All, > > We're aware that this has happened. The process that we set-up a three > months ago with Let's Encrypt was not fully implemented. > > There is no need to report this again, and I will update these lists > when it is addressed. > > It does not affect www.php.net, but it does affect: > > pecl.php.net > pear.php.net > talks.php.net > master.php.net (which effects many other integrations as well) > bugs.php.net > and likely others. > > cheers, > Derick > >
-- https://derickrethans.nl | https://xdebug.org | https://dram.io Author of Xdebug. Like it? Consider supporting me: https://xdebug.org/support Host of PHP Internals News: https://phpinternals.news mastodon: @derickr@phpc.social @xdebug@phpc.social twitter: @derickr and @xdebug

tag Knife

2 years ago
Hi Derick, Is there any reason why PHP does not use an automated certificate renewal for lets encrypt? Such as EFF-ACME-Certbot? [https://certbot.eff.org/] On Mon, 11 Sept 2023 at 15:55, Derick Rethans <derick@php.net> wrote:

Derick Rethans

2 years ago
On 11 September 2023 16:16:45 BST, tag Knife <fenniclog@gmail.com> wrote:
>Hi Derick, > >Is there any reason why PHP does not use an automated certificate renewal >for lets encrypt? >Such as EFF-ACME-Certbot? [https://certbot.eff.org/]
We do, but we need to coordinate the same cert onto multiple servers, which is the process that isn't set up correctly yet. cheers Derick

Derick Rethans

2 years ago
Hi, I (and Rasmus) have now updated TLS certificates on all the servers that I am aware off (and have access to). They are now automated with Let's Encrypt. I also have a todo item every month to check whether the certs actually renewed. If there are currently still *.php.net sites that have HTTPS errors, please do let me know. cheers, Derick On Mon, 11 Sep 2023, Derick Rethans wrote:
> Hi All, > > We're aware that this has happened. The process that we set-up a three > months ago with Let's Encrypt was not fully implemented. > > There is no need to report this again, and I will update these lists > when it is addressed. > > It does not affect www.php.net, but it does affect: > > pecl.php.net > pear.php.net > talks.php.net > master.php.net (which effects many other integrations as well) > bugs.php.net > and likely others. > > cheers, > Derick > >
-- https://derickrethans.nl | https://xdebug.org | https://dram.io Author of Xdebug. Like it? Consider supporting me: https://xdebug.org/support Host of PHP Internals News: https://phpinternals.news mastodon: @derickr@phpc.social @xdebug@phpc.social twitter: @derickr and @xdebug

BohwaZ/PHP

2 years ago
Hi Derick, I've had the same kind of issue as you. So I set up a script that will check every day if the certificate for my domains expires in more than 30 days and sends me a SMS if the check fails. Here is the code of the certificate check part, if that may be useful: https://gist.github.com/bohwaz/a3e4eb91e82f12768b69f8d24cf0cca8 Have a nice day :)