Thank you, they are short lived as good certs should be.
But somehow renewal got stuck :-/
The report helped for this to not be missed to long.
They have all been renewed a few hours ago:
for i in 1.ntp.ubuntu.com 2.ntp.ubuntu.com 3.ntp.ubuntu.com 4.ntp.ubuntu.com ;
do echo "#### $i ####" ; openssl s_client -connect "$i:4460" -alpn ntske/1
2>/dev/null </dev/null | openssl x509 -noout -dates ; done
#### 1.ntp.ubuntu.com ####
notBefore=Aug 27 14:48:33 2026 GMT
notAfter=Nov 25 14:48:32 2026 GMT
#### 2.ntp.ubuntu.com ####
notBefore=Aug 27 14:48:33 2026 GMT
notAfter=Nov 25 14:48:32 2026 GMT
#### 3.ntp.ubuntu.com ####
notBefore=Aug 27 14:48:33 2026 GMT
notAfter=Nov 25 14:48:32 2026 GMT
#### 4.ntp.ubuntu.com ####
notBefore=Aug 27 14:48:33 2026 GMT
notAfter=Nov 25 14:48:32 2026 GMT
--
Or the same in your check:
for ip in \
185.125.190.122 \
185.125.190.123 \
91.189.91.112 \
91.189.91.113
do
echo "===== $ip ====="
timeout 5 openssl s_client \
-connect "$ip:4460" \
-servername ntp.ubuntu.com \
</dev/null 2>/dev/null |
openssl x509 -noout -subject -issuer -dates
done
===== 185.125.190.122 =====
subject=CN=ntp.ubuntu.com
issuer=C=US, O=Let's Encrypt, CN=YR2
notBefore=Aug 27 14:48:33 2026 GMT
notAfter=Nov 25 14:48:32 2026 GMT
===== 185.125.190.123 =====
subject=CN=ntp.ubuntu.com
issuer=C=US, O=Let's Encrypt, CN=YR2
notBefore=Aug 27 14:48:33 2026 GMT
notAfter=Nov 25 14:48:32 2026 GMT
===== 91.189.91.112 =====
subject=CN=ntp.ubuntu.com
issuer=C=US, O=Let's Encrypt, CN=YR2
notBefore=Aug 27 14:48:33 2026 GMT
notAfter=Nov 25 14:48:32 2026 GMT
===== 91.189.91.113 =====
subject=CN=ntp.ubuntu.com
issuer=C=US, O=Let's Encrypt, CN=YR2
notBefore=Aug 27 14:48:33 2026 GMT
notAfter=Nov 25 14:48:32 2026 GMT
** Changed in: chrony (Ubuntu)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2165169
Title:
Ubuntu NTS servers present expired TLS certificate, causing chrony
time synchronization to fail
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chrony/+bug/2165169/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
