Event Ingestion and TLS Root Certificate Expiration

Incident Report for Sentry

Resolved

On September 30, 14:02 UTC one of the root certificates (DST Root CA X3) will expire.

Parts of our ingestion pipeline use TLS certificates issued by the LetsEncrypt project that will no longer be recognized as valid by old devices after that root certificate expires. One example is ingestion domains in the form of oXXX.ingest.sentry.io that are used as part of Sentry DSNs(https://docs.sentry.io/product/sentry-basics/dsn-explainer/). More information about the expiration of DST Root CA can be found here: https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/.

We don't anticipate any impact for the majority of our customers, but recommend to check if the clients that are sending traffic to Sentry are in the list of the affected platforms (https://letsencrypt.org/docs/certificate-compatibility/).

If you have concerns, please feel free to reach out to Sentry support (https://help.sentry.io/).

Posted Sep 29, 2021 - 09:00 PDT