Bug: LetsEncrypt se...
 
Notifications
Clear all

Bug: LetsEncrypt sends reminders to wrong customer

2 Posts
2 Users
0 Reactions
743 Views
Posts: 71
Topic starter
(@dolphyn5)
Estimable Member
Joined: 8 years ago

Today I learned that two of my customers have received LetsEncrypt renewal notices for domains belonging to different customers on the same server. The emails are coming from LetsEncrypt via Mandrill, as described here.

Apparently SolidCP is configuring a customer's email address in the ACME account details for each web server, and I think that email address is then used for every LetsEncrypt certificate on that server. I think the configuration ought to be the server admin's email address, but SolidCP used a customer's address instead.

I found a workaround method to verify and correct the setting on each web server:

  1. Run C:SolidCPServerbinLetsEncryptwacs.exe
  2. Enter "O" for "More options..."
  3. Enter "A" for "ACME account details"
  4. The configured email address will be displayed. If it's not what you want, enter "Y" to modify contacts.
1 Reply
Posts: 1509
Admin
(@trobinson)
Noble Member
Joined: 9 years ago

Hello,

I have logged a bug at https://github.com/FuseCP/SolidCP/issues/49 and it will be fixed by the next release.

We will most likely look to add a setting in the web provider settings with the LE subscriber email.

Regards,

Trevor

Reply
Share: