Let's Encrypt Bug [Not For WA Sites]
If you haven't heard, the free SSL Certificate provider Let's Encrypt, will revoke more than 3 million TLS certificates on Wednesday, March 4, 2020, due to a bug it discovered it just few days ago on Feb. 29th.
You can check to see if your domain is affected by going here.
First, you don't have to worry about sites hosted here at WA. But, if you have a website hosted elsewhere, it could possibly affect you.
If you recieved an email from "letsencrypt.org" stating that your website is affected, you'll need to renew your Let's Encrypt SSL Certificate immediately or your visitors will start recieving errors when accessing your site.
I have an affected domain hosted elsewhere and I did not receive an email until today and just read it about 2 hours ago. Not much time to correct the issue, but oh well...
Renewing a Let's Encrypt certificate is pretty simple. It's usually done via your control panel, such as CPanel. Different hosting providers may have different instructions for requesting Lets Encrypt certificates. You simply renew or request a new certificate. Sometimes it happens automatically, in which case your domain will show OK when you check it. Mine did not, so I had to renew it.
Contact your hosting support if you need assistance doing this.
Again, you can check to see if your domain is affected by going here. Once the certificate is renewed, your domain will show OK in the tool.
Regards,
Michael
Recent Comments
10
It's only around 2% of sites with Let's Encrypt SSL certificates that are affected. But what makes you so sure that websites hosted here are not affected? Like most hosts, WA uses Let's Encrypt for the SSL certificates.
There's no cause for panic but there's no cause for complacency either.
It's easy to check if your site has been affected.
https://checkhost.unboundtest.com/
According to Site Support, ours renew automatically and shouldn't be affected.
Like you said, wouldn't hurt to check.
Thanks,
Michael
Hi Michael
I’ve noticed that a few sites I have visited recently are showing problems with security. I wonder if it’s anything to do with this.
Cheers
Dave
See more comments
Thanks for the info. I haven't had any warnings but will check it out.