1. Forum
  2. Fidonet
  3. INTERNET

  • LetsEncrypt

    From Brian Rogers@1:142/103 to All on Fri Oct 1 18:29:58 2021
    Anyone who had issues with certs signed by Let's Encrypt may have noticed issues. They had a major "oops" by not renewing their own certs which made
    all other certs under them appear expired.

    https://www.yahoo.com/news/internet-goes-down-millions-tech-021400230.html

    I know on iPhones, email accounts that use servers who have certs signed
    by Let's Encrypt have issues. I'm not an Apple person but if anyone knows
    how to force an update of the cert without having to recreate an email
    account I'd love to hear from you.
    --- SBBSecho 3.11-Linux
    * Origin: SBBS - Carnage! Hartford, Ct (1:142/103)
  • From Nick Andre@1:229/426 to Brian Rogers on Sat Oct 2 08:22:13 2021
    On 01 Oct 21 18:29:58, Brian Rogers said the following to All:

    I know on iPhones, email accounts that use servers who have certs signed
    by Let's Encrypt have issues. I'm not an Apple person but if anyone knows

    My Iphone SE on IOS 15 does not have any problems.

    Nick

    --- Renegade vY2Ka2
    * Origin: Joey, do you like movies about gladiators? (1:229/426)
  • From Brian Rogers@1:142/103 to Nick Andre on Sat Oct 2 09:06:00 2021
    Hello Nick;

    Nick Andre wrote to Brian Rogers <=-

    My Iphone SE on IOS 15 does not have any problems.

    My iPhone 6 with IOS 14 won't let me use the account, it's totally locked
    out and I don't see how I can import a new cert.

    ... Screw the Final Frontier! Let's go see Batman.
    --- MultiMail/Linux v0.52
    * Origin: SBBS - Carnage! Hartford, Ct (1:142/103)
  • From Jay Harris@1:229/664 to Brian Rogers on Sat Oct 2 09:48:34 2021
    On 02 Oct 2021, Brian Rogers said the following...

    My iPhone 6 with IOS 14 won't let me use the account, it's totally locked out and I don't see how I can import a new cert.

    It looks like the iPhone 6 is stuck on iOS 12, so you wouldn't automatically get the new certificate store. There was just an update released for iOS 12, so maybe make sure you have that installed.

    If you do, it looks like you can go to https://letsencrypt.org/certificates/ on your iPhone and tap on the der or pem links for the ISRG Root X1 certificate, your iPhone should tell you it's trying to install a profile.


    Jay

    ... I've already got a female to worry about. Her name is the Enterprise.

    --- Mystic BBS v1.12 A47 2021/09/29 (Raspberry Pi/32)
    * Origin: Northern Realms (1:229/664)
  • From Brian Rogers@1:142/103 to Jay Harris on Sat Oct 2 20:27:00 2021
    Hello Jay;

    Jay Harris wrote to Brian Rogers <=-

    It looks like the iPhone 6 is stuck on iOS 12, so you wouldn't automatically get the new certificate store. There was just an update released for iOS 12, so maybe make sure you have that installed.

    I'm not an apple person at all, but I do have an iPhone 6 for testing. I
    did upgrade my iOS 12.

    If you do, it looks like you can go to https://letsencrypt.org/certificates/ on your iPhone and tap on the der
    or pem links for the ISRG Root X1 certificate, your iPhone should tell
    you it's trying to install a profile.

    Thanks for the tip, I'll have to give it a shot.

    ... Why do bees stay in their hives during winter? Swarm.
    --- MultiMail/Linux v0.52
    * Origin: SBBS - Carnage! Hartford, Ct (1:142/103)
  • From Nick Andre@1:229/426 to Brian Rogers on Sat Oct 2 21:10:55 2021
    On 02 Oct 21 09:06:00, Brian Rogers said the following to Nick Andre:

    My Iphone SE on IOS 15 does not have any problems.

    My iPhone 6 with IOS 14 won't let me use the account, it's totally locked out and I don't see how I can import a new cert.

    I'm not sure if upgrading to IOS 15 will fix it. All I know is my two Exchange email accounts with LE certs on the servers do not have problems with IOS 15.

    But apparently Outlook for Mac with that same email scenario is broken now...

    Nick

    --- Renegade vY2Ka2
    * Origin: Joey, do you like movies about gladiators? (1:229/426)
  • From Brian Rogers@1:142/103 to Nick Andre on Sun Oct 3 14:32:00 2021
    Hello Nick;

    Nick Andre wrote to Brian Rogers <=-

    But apparently Outlook for Mac with that same email scenario is broken now...

    It's not just Apple that had issues with LE certs, also Microsoft, google,
    and others. This wasn't a small thing by all means.

    ... You are stuck with your debt if you can't budge it.
    --- MultiMail/Linux v0.52
    * Origin: SBBS - Carnage! Hartford, Ct (1:142/103)
  • From Nick Andre@1:229/426 to Brian Rogers on Sun Oct 3 22:42:29 2021
    On 03 Oct 21 14:32:00, Brian Rogers said the following to Nick Andre:

    But apparently Outlook for Mac with that same email scenario is broken now...

    It's not just Apple that had issues with LE certs, also Microsoft, google, and others. This wasn't a small thing by all means.

    My Exchange 2016 server at home on an LE cert worked fine...

    Nick

    --- Renegade vY2Ka2
    * Origin: Joey, do you like movies about gladiators? (1:229/426)
  • From Brian Rogers@1:142/103 to Nick Andre on Tue Oct 5 10:04:00 2021
    Hello Nick;

    Nick Andre wrote to Brian Rogers <=-

    My Exchange 2016 server at home on an LE cert worked fine...

    My postfix system with LE certs worked fine too even with my droid devices. Apple on the other hand didn't care for it.

    ... Old sailors never die, they just get a little dingy.
    --- MultiMail/Linux v0.52
    * Origin: SBBS - Carnage! Hartford, Ct (1:142/103)