[Spce-user] Important Notice: Sipwise debian repositories migrated to LetsEncrypt signed SSL certificates

[sergii kipot]

Dear community,

  *     Starting from April 4 2018 Sipwise debian repositories have been
    reconfigured with new LetsEncrypt signed SSLcertificates.

  *     All installations running the following old unsupported releases
    are affected by this change:

            mr4.0.x
            mr4.1.x

        'apt-get update' and similar commands accessing Sipwise debian
repositories stopped working after the change in question.
        The reason for this is old libcurl library (Debian wheezy) that
doesn't recognize LetsEncrypt intermediate CA as trusted onewhileAPT
httpS transport is enabled by default.

  *     Manual workaround should be applied to these releases by
    executing two following commands on all servers within
    installation(with 'root' privilege):

        wget
        https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem.txt-O
        /usr/local/share/ca-certificates/lets-encrypt-x3-cross-signed.crt

        update-ca-certificates

  *     All other releases including old LTS 2.8/mr3.8.*/mr4.5.*/mr5.5.*
    are NOT affected by the migration to LetsEncrypt signed SSL
    certificates.

        If you are facingsome issues for supported releases which look
    connected to the change in question please report it to this mailing
    list.

   
Thank you.

-- 
Sergii Kipot
QA Engineer
Sipwise GmbH, Campus 21/Europaring F15
AT-2345 Brunn am Gebirge
skipot at sipwise.com
Website: http://www.sipwise.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20180405/b8d80985/attachment.html>