ViciPhone SSL Certificate Expired

[jamiemurray]

It appears the SSL certificate on the domain phone.viciphoone.com has expired around 30 minutes ago.
To work around it open https://phone.viciphone.com in another tab and accept the expired certificate.
I already emailed support to let them know.

[mflorell]

Thanks for the note, looks like we fixed it within 30 minutes. We have 3 separate servers that handle the load for this service and it looks like we had an issue coordinating between the three.

[jamiemurray]

Very fast turnaround indeed Matt, James emailed me back around 45 mins after I emailed in.
At least it was at the end of the day and not the beginning when most agents would have been logging in.

[williamconley]

In addition to attempting to renew all certs weekly (at night), we run this weekly for all outstanding certificates (during normal operating hours, when everything's online). An alarm goes off if the date is under 23 days into the future. Thus allowing a minimum three weeks to resolve any issues if the renewal script fails for a non-negligible reason (like a server was rebooting during the attempt). Backup red flag systems are cool.

Note that this appears to work for any port so far. We've use it with 443, 10000, 8089 and several non-standard web ports.

Code: Select all

DOMAIN=xxxx.xxxx.com
PORT=8089
echo | openssl s_client -showcerts -servername $DOMAIN -connect $DOMAIN:$PORT 2>/dev/null | openssl x509 -inform pem -noout -text | grep 'Not After' -A 1; echo "        Port $PORT"