Server returned error "SSL error: Leaf certificate is expired"

webtweakers

I'm have been using Gmail to send and receive emails for my emails accounts at Opalstack.
This all worked very well, until today.

Both sending and receiving mails is currently failing.

When trying to receive mails, this error is reported by Gmail:

Server returned error "SSL error: Leaf certificate is expired"

And when trying to send mails, I'll immediately receive a response from Gmail with a message stating:

You're sending this from a different address or alias using the 'Send mail as' feature. The settings for your 'Send mail as' account are misconfigured or out of date. Check those settings and try resending.

And additionally:

TLS Negotiation failed, the certificate doesn't match the host. For more information, go to https://support.google.com/a/answer/2520500

There was some problem recently, with the European mail server? Is this related? Is the problem at Opalstack, or should I search elsewhere? Any ideas?

Thanks.

klynton

Hi,

The certificate expired early this morning, it's been updated and everything should be resolved now.

webtweakers

klynton Indeed it is. Thanks!

ttavoy

klynton Thanks ... email appears to be working normally again here ... but given that this caused an hour or so of worry while I wondered if the problem could be on my side ... there being no mention of anything on status.opalstack.com ... would it be fair to ask how certificates can be allowed to just expire? I mean, I thought that kind of thing was supposed to not happen.

klynton

We use the same short termed certificates from Let's Encrypt that all of our web sites use for these particular certificates. Having them last only 90 days gives us a bit more security than the long lived certs because they are easily revokable and the generation can be automated. In this case the certificates are automatically generated but there's a manual step before deploying the new certs out to our entire mail infrastructure and I was an hour and a half late getting those buttons pressed.