-------- Original Message --------
From: Viktor Dukhovni via Postfix-users [mailto:[email protected]]
Sent: Tuesday, May 2, 2023 at 11:32 AM EDT
To: [email protected]
Subject: [pfx] Re: inbound failures only from outbound.protection.outlook.com.
Cert issue in this log?
On Tue, May 02, 2023 at 11:09:59AM -0400, PGNet Dev wrote:
what root CA expiry are you referring to?
The DST root, that issued the ISRG X1 cross cert.
https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
yikes. missed that by a mile!
From my renewal.conf file:
[renewalparams]
reuse_key = True
preferred_chain = ISRG Root X1
...
and for acme,
https://github.com/acmesh-official/acme.sh/wiki/Preferred-Chain
i'll get this in place with the downstream, and see what it cures!
thx o/
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
