Smtp.riseup.net compromised?

Dichotomy a posé une question...
I think your SMTP mail server has been popped (apologies if I'm not the first person to raise this.

My mail client (Evolution on Arch Linux, last system update was about 2 weeks ago) suddenly started to complain about an untrusted SSL/TLS certificate when I tried to send an email just now. (Details below)

When I try and send an email via the WebClient, I get a similiar error about SMTP.


____________UNTRUSTED CERTIFICATE START__________________________UNTRUSTED CERTIFICATE START______________


*.riseup.net
Identity: *.riseup.net
Verified by: Sectigo RSA Domain Validation Secure Server CA
Expires: 10/01/2021

Subject Name
OU (Organizational Unit): Domain Control Validated
OU (Organizational Unit): PositiveSSL Wildcard
CN (Common Name): *.riseup.net
Issuer Name
C (Country): GB
ST (State): Greater Manchester
L (Locality): Salford
O (Organization): Sectigo Limited
CN (Common Name): Sectigo RSA Domain Validation Secure Server CA
Issued Certificate
Version: 3
Serial Number: 00 C1 ED D3 BE 59 1C 6B E2 5F CF A4 5B 54 CD 0F 0B
Not Valid Before: 2019-10-02
Not Valid After: 2021-10-01
Certificate Fingerprints
SHA1: AF 12 1B 43 C0 50 56 F1 10 34 61 EB 50 D7 BA 45 19 3A 3F 97
MD5: DD 6F 66 C6 79 4D B3 14 DF 34 57 7F 8C 22 3C 98
Public Key Info
Key Algorithm: RSA
Key Parameters: 05 00
Key Size: 4096
Key SHA1 Fingerprint: 9E EE 84 F6 B2 CA BC F1 24 05 EC 70 DC AD 92 BA 6D EA BB 8D
Public Key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
Extension
Identifier: 2.5.29.35
Value: 30 16 80 14 8D 8C 5E C4 54 AD 8A E1 77 E9 9B F9 9B 05 E1 B8 01 8D 61 E1
Critical: No
Subject Key Identifier
Key Identifier: 58 80 21 82 B3 06 D5 98 EA 9D B5 65 21 74 20 C5 3A DD 1D 45
Critical: No
Key Usage
Usages: Digital signature
Key encipherment
Critical: Yes
Basic Constraints
Certificate Authority: No
Max Path Length: Unlimited
Critical: Yes
Extended Key Usage
Allowed Purposes: Server Authentication
Client Authentication
Critical: No
Extension
Identifier: 2.5.29.32
Value: 30 40 30 34 06 0B 2B 06 01 04 01 B2 31 01 02 02 07 30 25 30 23 06 08 2B 06 01 05 05 07 02 01 16 17 68 74 74 70 73 3A 2F 2F 73 65 63 74 69 67 6F 2E 63 6F 6D 2F 43 50 53 30 08 06 06 67 81 0C 01 02 01
Critical: No
Extension
Identifier: 1.3.6.1.5.5.7.1.1
Value: 30 76 30 4F 06 08 2B 06 01 05 05 07 30 02 86 43 68 74 74 70 3A 2F 2F 63 72 74 2E 73 65 63 74 69 67 6F 2E 63 6F 6D 2F 53 65 63 74 69 67 6F 52 53 41 44 6F 6D 61 69 6E 56 61 6C 69 64 61 74 69 6F 6E 53 65 63 75 72 65 53 65 72 76 65 72 43 41 2E 63 72 74 30 23 06 08 2B 06 01 05 05 07 30 01 86 17 68 74 74 70 3A 2F 2F 6F 63 73 70 2E 73 65 63 74 69 67 6F 2E 63 6F 6D
Critical: No
Subject Alternative Names
DNS: *.riseup.net
DNS: riseup.net
Critical: No
Extension
Identifier: 1.3.6.1.4.1.11129.2.4.2
Value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
Critical: No
Signature
Signature Algorithm: 1.2.840.113549.1.1.11
Signature Parameters: 05 00
Signature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

____________UNTRUSTED CERTIFICATE END__________________________UNTRUSTED CERTIFICATE END______________
Vote | 0
Medium
Crossbill a répondu...
Hi,

Have a look at our status page, and our twitter - we just updated our certificates.

Can you try and restart evolution to see if it is able to verify things again?
Vote | 0