Security Issue Updated Certificates

[x201_F12]

My system shows on the dashboard that

"Security Issue

Updated Certificates

This is a critical issue and should be resolved urgently"

I also get the email every week now (last 2)

"SECURITY NOTICE:

Some Certificates are expiring or have expired:"

So I

"FREE PBX FORCE UPDATE

fwconsole cert --updateall --force"

then
“fwconsole ma refreshsignatures”

And it still didn’t help.

Rebooted it too.

However, when I go to the Certificate Management it is valid .

"Certificate Valid Until

2023-10-21 (89 days)"

When look at the Cert from the browser it says Validity Period is

" Issued On

Sunday, July 23, 2023 at 10:21:07 AM

Expires On

Saturday, October 21, 2023 at 10:21:06 AM"

Not sure why it refuses to update in the dashboard and whatever triggers the email.

[dicko]

fwconsole cert --list

[x201_F12]

±—±----------------±----------------±--------------±--------+
| ID | Base Name | Description | Type | Default |
±—±----------------±----------------±--------------±--------+
| 0 | pbxsub.mydomian.net | pbxsub.mydomain.net | Let’s Encrypt | X |
±—±----------------±----------------±--------------±--------+

[dicko]

ls -l /etc/asterisk/keys

[x201_F12]

drwxr-xr-x 2 asterisk asterisk 43 Jul 30 2020 _account
-rw------- 1 asterisk asterisk 1675 Jul 5 2020 api_oauth.key
-rw------- 1 asterisk asterisk 451 Jul 5 2020 api_oauth_public.key
drwxrwxr-x. 2 asterisk asterisk 71 Jul 23 11:21 integration
drwxr-xr-x 2 asterisk asterisk 113 Mar 22 2021 pbxsub.mydomain.net
-rw------- 1 asterisk asterisk 3752 Jul 23 11:21 pbxsub.mydomain.net-ca-bundle.crt
-rw------- 1 asterisk asterisk 2113 Jul 23 11:21 pbxsub.mydomain.net.crt
-rw------- 1 asterisk asterisk 5866 Jul 23 11:21 pbxsub.mydomian.net-fullchain.crt
-rw------- 1 asterisk asterisk 3268 Jul 23 11:21 pbxsub.mydomian.net.key
-rw------- 1 asterisk asterisk 9135 Jul 23 11:21 pbxsub.mydomian.net.pem

[x201_F12]

Any ideas?

[dicko]

Not really, what’s in that pbxsub.mydoimain.net directory ?

Also,

mysql asterisk -e 'select * from notifications'

[dobrosavljevic (Igor Dobrosavljevic)]

Since it’s pretty trivial to create a new one maybe remove what you currently have and recreate it as a troubleshooting step?

[x201_F12]

This week I didn’t get the warning in my weekly email from the server. I logged on and the warning is gone in the dashboard as well. Procrastination win this time! LOL

Thanks