Proxmox.com metadata CDN https certs have expired

[justinclift]

Hey all,

[Not sure exactly where to post this, but figured someone should so it gets looked at]

The https certificates on at least some of the Proxmox metadata CDN servers expired yesterday (31 March).

Discovered when attempting to view a changelog in the Updates section of a PVE host:

```
E: Failed to fetch https://metadata.cdn.proxmox.com/do...on/p/pve-manager/pve-manager_8.1.10.changelog Changelog unavailable for pve-manager=8.1.10 (Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 103.76.41.50 443])
RC: 100
```

Viewing that url with Firefox shows their standard warnings about an expired certificate, so it looks like this is an actual problem rather than something spurious:

 

[justinclift]

This post doesn't seem to have been noticed by anyone official, so I've just emailed the office@proxmox.com address to try and alert them as well.

If that doesn't go anywhere, I'll also try the security@ address. In theory some avenue should work.

 

[fabian]

can confirm, should be handled shortly.

 

[fabian]

fixed. this only affected the metadata host and only a single node in the CDN fortunately, we'll make the checks noisier so that similar failures are not as easy to overlook in the future.

 

[justinclift]

Cool, all good.