Skip to content
This repository was archived by the owner on Oct 24, 2021. It is now read-only.

Commit ebacaeb

Browse files
authored
Update expired-certificate.md
1 parent 92cf9a0 commit ebacaeb

File tree

1 file changed

+10
-5
lines changed

1 file changed

+10
-5
lines changed

source/expired-certificate.md

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Expired Certificates
33
description: Troubleshooting Expired Certificates Issues
44
---
55

6-
<h2 id="certificates-issue">Can't start Meteor due to certificate issues</h2>
6+
<h2 id="commands">Can't run Meteor commands</h2>
77

88
Galaxy and all Meteor servers uses Let's Encrypt, which announced a change in May in this [post](https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021) about DST Root CA X3 expiring on September 30, 2021.
99

@@ -23,7 +23,12 @@ NODE_TLS_REJECT_UNAUTHORIZED=0 meteor deploy
2323

2424
Also note that if you are running old distributions, like Ubuntu 16 and before, locally, or in any of your CI pipelines you may also face this issue. In this case, we do recommend updating your distribution, or your local repository of root certificates (the how-to of this varies based on your distribution).
2525

26-
If your server is accessing external let’s encrypt resources with an old Meteor version, you will also need to add NODE_TLS_REJECT_UNAUTHORIZED to your container env vars. If you are using Galaxy, it's simple as using your settings file:
26+
27+
<h2 id="server-requests">Requests failing</h2>
28+
29+
If your server is accessing external resources where the target host is using Let's Encrypt certificates and your app is running an old Meteor version, you will also need to add `NODE_TLS_REJECT_UNAUTHORIZED` to your server environment variables.
30+
31+
If you are using Galaxy, it's as simple as adding this to your settings file:
2732

2833
```json
2934
{
@@ -35,9 +40,9 @@ If your server is accessing external let’s encrypt resources with an old Meteo
3540
}
3641
```
3742

38-
***Please note:*** We don't recommend continued use of this workaround, as any SSL certificate is going to be authorized and you are exposing your application to serious security issues. The best option is to update Meteor to latest version, or a supported one.
43+
***Please note:*** We don't recommend continued use of this workaround, as any SSL certificate is going to be authorized and you are exposing your application to serious security issues. The best option is to update Meteor to latest version, or at least Meteor 1.9 as it is the first using Node.js 12.
3944

40-
You can check our list of supported Meteor versions [here](https://github.com/meteor/meteor/blob/devel/SECURITY.md#supported-versions). If your applications is not in one of them, you should migrate asap.
45+
You can check our list of supported Meteor versions [here](https://github.com/meteor/meteor/blob/devel/SECURITY.md#supported-versions). If your applications is not in one of them, you should migrate as soon as possible.
4146

4247
<h2 id="client-compatibility">Client Compatibility</h2>
4348

@@ -53,4 +58,4 @@ sudo certbot certonly --manual --preferred-chain "ISRG Root X1" --preferred-chal
5358

5459
More info can be obtained [here](https://letsencrypt.org/certificates).
5560

56-
If you are using Galaxy, you need to follow the requirements and steps [here](https://galaxy-guide.meteor.com/encryption.html#Custom%20certificate) after generating the certificate. Galaxy only accepts custom certs in .pem format, the same as nginx uses.
61+
If you are using Galaxy, you need to follow the requirements and steps [here](https://galaxy-guide.meteor.com/encryption.html#Custom%20certificate) after generating the certificate. Galaxy only accepts custom certs in .pem format, the same as nginx uses.

0 commit comments

Comments
 (0)