TECHZEN Zenoss User Community ARCHIVE  

Outdated root certificate store - Lets Encrypt no longer working

Subject: Outdated root certificate store - Lets Encrypt no longer working
Author: Michael Ducharme
Posted: 2021-11-24 12:31

Hello,

We have zenactiond creating tickets in our OTRS system using the OTRS API. This stopped working on September 30 when Lets Encrypt DST Root CA X3 expired. I ran yum update ca-certificates in the underlying OS to get the new root, but the zenactiond container did not have that. I had to run the same command in the zenactiond container itself, which fixed the issue temporarily. However upon rebooting the server, the change to the zenactiond container was not persistent, as expected, and so the problem came back.

I know of the procedure in the knowledgebase for installing a permanent tool or script, but that is for the main zope container, and in my case it is zenactiond that has to be updated. Does anybody know how to do this?

THanks.

------------------------------
Michael Ducharme
------------------------------

< Previous
/exports/serviced_volumes_v2/295 at 80.3%
  Next
Zenoss 6 Graph Consolidation MAX issue
>