SOLVED Incredible PBX Security Alert (Dashboard)

[phonebuff]

Got this email today from one of my instances -
Incredible PBX 17.0.28

Some Certificates are expiring or have expired:
Certificate named "default" is going to expire in less than a month. Please
update this certificate in Certificate Manager</br>

Is it time to rebuild this Vultr instance again? Or is there an upgdate/upgrade available?



After CLI Login --
Incredible PBX 17.0.28 'Dashboard'
Connected to Asterisk 22.5.1 currently running on ipbx2 (pid = 2284)


Retrieving... lastupdate2024
Updates available as of Sun May 10 14:13:44 EDT 2026: 13
Checking for update20241. INSTALLED: Automatic Update Utility test OK
Checking for update20242. INSTALLED: Updated Asterisk log rotate
Checking for update20243. INSTALLED: Discarding root mail notices
Checking for update20244. INSTALLED: Voicemail hints enabled
Checking for update20245. INSTALLED: UCP bug fix. Clear browser cache before use .
Checking for update20246. INSTALLED: 412 Call by Code updated
Checking for update20247. INSTALLED: BulkVS whielist updated
Checking for update20248. INSTALLED: incrediblebackup2021 script updated
Checking for update20249. INSTALLED: pbxstatus public IP query updated
Checking for update202410. INSTALLED: Yahoo News (951) query resurrected
Checking for update202411. INSTALLED: Skipped cosmetic fix to web login screen
Checking for update202412. INSTALLED: iptables-custom whitelist updated for DIDf orSale
Checking for update202413. NOT FOUND. Installing... update202413


Updating IncrediblePBX module for bug fix...
No repos specified, using: [standard,unsupported] from last GUI settings

framework is the same as the online version, unable to upgrade
Updating Hooks...Done
Chowning directories...Done
No repos specified, using: [standard,unsupported] from last GUI settings

core is the same as the online version, unable to upgrade
Updating Hooks...Done
Chowning directories...Done
No repos specified, using: [standard,unsupported] from last GUI settings

incrediblepbx is the same as the online version, unable to upgrade
Updating Hooks...Done
Chowning directories...Done
Reload Started
Reload Complete

core, framework, incrediblepbx modules updated.

Updates and notifications completed.

 

[billsimon]

Rebuild the server for an expired certificate?

Sell your home and move to a new one when a light bulb burns out?

Serious answer: renew, replace, or ignore the certificate in question. Since you are asking about this, chances are that you are not using the certificate, so “ignore” would be fine.

 

[phonebuff]

@billsimon

I will only move when the A/C fails, light bulbs I can handle.

But, yes I could renew or replace the Certs in question. But as I am not following the project and updates as closely as I once did. I was thinking that these might be indicative of a "Canary in a coal mine" warning that it might be time for a more serious look, and an update may be overdue.

Thanks for taking the time to respond.

PS: You are correct in that I do not believe I have anything that uses/needs Certs from this box today.

 

[hecatae]

ran into the same thing this morning.

The default self-signed certificate has expired...

Thing is, we do not use any debian packages from deb.freepbx.org.
So whilst it is a canary in the coalmine, it's not our coalmine and it's not our canary.

I went to certificate management and deleted the default certificate and the incrediblepbxcertificate disappeared too.

 

[billsimon]

The default self-signed certificate has expired...

Thing is, we do not use any debian packages from deb.freepbx.org.

These have nothing to do with each other.

 

[KNERD]

It's just a self-signed certificate which shipped with FreePBX. You can remove it from the Admin -> Certificate Manager.