Issue Problem postfix with an lot of ssl renew

[sebgonzes]

Hello

This night we have smtp issue on various servers, it seem due to mass renew ssl and have a lot of these process :


postmap 724 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
smtpd 2222 0 12r REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
smtpd 3416 0 12r REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
smtpd 3713 0 12r REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
smtpd 3909 0 12r REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 11561 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 14944 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 15460 0 7uW REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 15460 0 8uW REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 15610 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 15999 0 6u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 16312 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 16334 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 16526 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 19064 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 20517 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 21229 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 22481 0 6u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 22703 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 23031 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 23038 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 23144 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 23578 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 24029 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db
postmap 24220 0 7u REG 8,5 9842688 14419303 /var/spool/postfix/plesk/certs.db


using strace, problem is clear :

[pid 21229] open("/var/spool/postfix/plesk/certs.db", O_RDWR) = 7
[pid 21229] flock(7, LOCK_EX
LOCKED

It's not seem normal that smtp fail during this process...

 

[sebgonzes]

The only temporal way that we have found to solve problem, is to kill multiple keep-secured.php process to stop so masive renew, and with this, stop the postfix lock

 

[TimReeves]

Possibly my post Postfix SNI TLS-Certs not auto-updated and this one are related, I'm not sure: By what mechanism are these SSL renewal processes started? Thanks, Tim