Skip to content
This repository was archived by the owner on Oct 24, 2021. It is now read-only.

Commit d22f1ab

Browse files
authored
Update expired-certificate.md
1 parent 169017b commit d22f1ab

File tree

1 file changed

+13
-2
lines changed

1 file changed

+13
-2
lines changed

source/expired-certificate.md

Lines changed: 13 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,10 @@ title: Expired Certificates
33
description: Troubleshooting Expired Certificates Issues
44
---
55

6+
Let's Encrypt Root Certificate expired on September 30th and this change is causing some issues. We explain the possible problems below and also how to solve them.
7+
8+
This is not a Meteor or Galaxy issue.
9+
610
<h2 id="commands">Can't run Meteor commands</h2>
711

812
Galaxy and all Meteor servers uses Let's Encrypt, which announced a change in May in this [post](https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021) about DST Root CA X3 expiring on September 30, 2021.
@@ -23,6 +27,7 @@ NODE_TLS_REJECT_UNAUTHORIZED=0 meteor deploy
2327

2428
Also note that if you are running old distributions, like Ubuntu 16 and before, locally, or in any of your CI pipelines you may also face this issue. In this case, we do recommend updating your distribution, or your local repository of root certificates (the how-to of this varies based on your distribution).
2529

30+
This is not a Meteor or Galaxy issue, but it's a change in the Let's Encrypt certificate in our resources that you are accessing.
2631

2732
<h2 id="server-requests">Requests failing</h2>
2833

@@ -44,6 +49,8 @@ If you are using Galaxy, it's as simple as adding this to your settings file:
4449

4550
You can check our list of supported Meteor versions [here](https://github.com/meteor/meteor/blob/devel/SECURITY.md#supported-versions). If your applications is not in one of them, you should migrate as soon as possible.
4651

52+
This is not a Meteor or Galaxy issue, but it's a change in the Let's Encrypt certificate in the external resource that you are accessing.
53+
4754
<h2 id="client-compatibility">Client Compatibility</h2>
4855

4956
As stated before, Galaxy issues Let's Encrypt certificates automatically for all clients. This is source of confusion, as if you are depending on older clients being able to access your website, this won't work.
@@ -58,7 +65,9 @@ sudo certbot certonly --manual --preferred-chain "ISRG Root X1" --preferred-chal
5865

5966
More info can be obtained [here](https://letsencrypt.org/certificates).
6067

61-
If you are using Galaxy, you need to follow the requirements and steps [here](https://galaxy-guide.meteor.com/encryption.html#Custom%20certificate) after generating the certificate. Galaxy only accepts custom certs in .pem format, the same as nginx uses.
68+
If you are using Galaxy, you need to follow the requirements and steps [here](https://galaxy-guide.meteor.com/encryption.html#Custom%20certificate) after generating the certificate. Galaxy only accepts custom certs in `.pem` format, the same as nginx uses.
69+
70+
This is not a Meteor or Galaxy issue, but it's a change in the Let's Encrypt certificate you are using.
6271

6372
<h2 id="clients-not-working">Clients Known to be not working</h2>
6473

@@ -68,4 +77,6 @@ Here is a succinct list of known to be not working clients:
6877
- Node.JS HTTP requests prior to v10. This includes any Meteor version prior to 1.9(except).
6978
- Any client using OpenSSL 1.0.2 and before.
7079

71-
Please note that this is not an exhaustive list, but based on our reports and experience. This is not a Meteor or Galaxy issue, but it's a change in the Let's Encrypt certificate you are using.
80+
Please note that this is not an exhaustive list, but based on our reports and experience.
81+
82+
This is not a Meteor or Galaxy issue, but it's a change in the Let's Encrypt certificate you are using.

0 commit comments

Comments
 (0)