Issue with Expired SSL Certificate after Domain Change in Mailcow

psycho0verload

Hello everyone,

I hope someone can assist me with a current issue I’m facing with Mailcow. Due to a DNSSEC problem, I recently had to change my domain in the configuration from mail.mydomain.it to mail.mydomain.network. Since then, my server operates under the new domain, and all certificates are correctly set up.

However, I keep receiving an alert from Watchdog via email indicating that the SSL certificate for the old domain has expired:

SSL CRITICAL - Certificate 'mail.mydomain.it' expired on 2023-07-08 01:03 +0200/CEST.

I’m unsure why this message keeps appearing given I’m now using a different domain. Does anyone have any insights on how to resolve this?

Thank you in advance for your assistance and advice!

esackbauer

Maybe the old certificate is still somehwere in use?
Have you checked this?
https://docs.mailcow.email/post_installation/firststeps-ssl/#check-your-configuration

If its all OK, I guess you can remove the old certificate. But do a backup before!
I don’t think that changing the main domain is a supported use case…
There might be adverse effects showing up later.

psycho0verload

The domain switch worked without any issues. The server itself is running perfectly. All SSL certificates are as they should be 🙂

However, I still get this message from Watchdog. I have the impression that Watchdog hasn’t realized I’ve switched domains. I could try deleting the certificates.

maximaw

Unless you explicitely revoked the certificate, you will get those notifications, even if you deleted the certificate. See this page (and the link to crt.sh therein) for an explanation of how notifications work.

esackbauer

maximaw The mails are not coming from Lets Encrypt, but from the Watchdog inside mailcow.

maximaw

Sorry, then my reply is useless, sorry :/

psycho0verload

Classic Layer 8 problem. I still had an instance on another server that was supposed to be inactive.