Let's encrypt internet certificate situation

[Keneda]

From 30 september there will be problem with internet access for some device with old certificate, see here : https://scotthelme.co.uk/lets-encrypt-old-root-expiration/

My question is to know if uTouch uses Ubuntu certicicates (16.04 seems OK) or android certificates ?

Will we be affected in any way, now or in futur ?

[Lakotaubp]

@keneda Maybe a q&a question?

[ezze]

I faced the issues with FluffyChat application. Neither my own instance of Matrix Synapse nor matrix.org (both using Let's Encrtypt) do not work anymore. The app says "No connection".

[flohack]

Thats the only issue we are facing currently: https://github.com/ubports/ubuntu-touch/issues/1838

[ezze]

@flohack Does FluffyChat work for you?

[flohack]

@ezze No, probably not, but as ignorant as it sounds, its not a Core App, and so from the foundations point of view its not an issue. You need to talk with @Krille if he can fix it.

[kugiigi]

@ezze Yup, doesn't work for me either in the past few days. I was ignoring this topic, I didn't expect I'll be affected this much

[Keneda]

@kugiigi
I'd have prefered you could ignore it limitless

[ezze]

@kugiigi I've created the issue in the repo regarding this: https://gitlab.com/KrilleFear/fluffychat/-/issues/184

Hope, we'll be able to fix it as soon as possible because all my personal messaging lives in Matrix. :folded_hands:

[bhdouglass]

You can fix this on the server side by running: certbot renew --force-renewal --preferred-chain "ISRG Root X1" (ref). This is what I did to fix the OpenStore app being broken.

Otherwise I hear you can blacklist the certificate. Or just wait for the fix for Ubuntu touch to land in an OTA.

[ezze]

@bhdouglass Thanks for sharing this. In my case I had to update certbot from 0.40.0 to 1.19.0 and recreate certificates:

sudo apt-get remove -y certbot python3-certbot-apache
sudo apt install snapd
sudo snap install certbot --classic
sudo ln -s /snap/bin/certbot /usr/bin/certbot
sudo certbot certonly --nginx --force-renewal --preferred-chain "ISRG Root X1"

It solves "No connection" issue in FluffyChat but after I input my login credentials I enter an infinite loop between two screens: "Please wait" and empty chat list proposing to swipe... Clearing cache doesn't help.

@kugiigi @Krille Could it be still related to the new certificate?

[

[ezze]

Nevermind, guys! The above bug with flashing screens is not linked with SSL-certificate. It's some another bug in FluffyChat appeared after a logged out and logged in again.

So renewing the certificate solves the issue completely. Thanks.