[00:05:57] My laptop runs Fedora Workstation [01:23:14] uhh mattermost needs a nginx restart so it uses the new cert [01:23:25] (currently inaccessible due to expiration) [01:23:49] @paladox @orduin [01:25:59] i didn't realize because there isn't an icinga check for mattermost.wikitide.net [03:41:04] > Websites prove their identity via certificates, which are valid for a set time period. The certificate for logging.wikitide.net expired on 15/10/2025. [03:41:06] whoopsie [03:44:38] [1/20] ``` [03:44:38] [2/20] [blankeclair@mwtask181:~]$ curl -v https://opensearch-mw.wikitide.net [03:44:38] [3/20] * Trying 10.0.16.141:443... [03:44:38] [4/20] * Connected to opensearch-mw.wikitide.net (10.0.16.141) port 443 (#0) [03:44:39] [5/20] * ALPN: offers h2,http/1.1 [03:44:39] [6/20] * TLSv1.3 (OUT), TLS handshake, Client hello (1): [03:44:39] [7/20] * CAfile: /etc/ssl/certs/ca-certificates.crt [03:44:40] [8/20] * CApath: /etc/ssl/certs [03:44:40] [9/20] * TLSv1.3 (IN), TLS handshake, Server hello (2): [03:44:40] [10/20] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): [03:44:40] [11/20] * TLSv1.3 (IN), TLS handshake, Certificate (11): [03:44:41] [12/20] * TLSv1.3 (OUT), TLS alert, certificate expired (557): [03:44:41] [13/20] * SSL certificate problem: certificate has expired [03:44:42] [14/20] * Closing connection 0 [03:44:42] [15/20] curl: (60) SSL certificate problem: certificate has expired [03:44:43] [16/20] More details here: https://curl.se/docs/sslcerts.html [03:44:43] [17/20] curl failed to verify the legitimacy of the server and therefore could not [03:44:44] [18/20] establish a secure connection to it. To learn more about this situation and [03:44:44] [19/20] how to fix it, please visit the web page mentioned above. [03:44:45] [20/20] ``` [03:45:04] seems to be the samw [03:45:15] same for graylog as well [03:45:32] May be good to [rollingly] restart NGINX across the board [03:45:47] reload :3c [03:50:32] Done for mattermost, graylog, mon, and os servers [03:50:34] Orduin to the rescue [10:44:30] gentoo on servers wen Miraheze???????????? [10:47:30] that made me think what does Gentoo think of XLibre since that was brought up in offtopic a while back [10:47:48] https://wiki.gentoo.org/wiki/Xlibre you know, I think they may not like them, but I'm not really sure 😂 [16:15:18] > The enhanced functionality is not described or listed. [16:47:45] [1/2] So what was the issue [16:47:46] [2/2] https://discord.com/channels/407504499280707585/407504500136607745/1427782854632411146 [16:56:38] Still being investigated for precise cause, but current suspicion is recent changes to add new default extensions but CW not executing the right SQL changes for those extensions during creation. Tech is better positioned than I to speak on that though.