#2455 closed task (fixed)

certbot-auto cronjob on osgeo6 is not working

Reported by: robe Owned by: sac@…
Priority: normal Milestone: Sysadmin Contract 2020-I
Component: Systems Admin Keywords:
Cc:

Description

Just got a notice from letsencrypt that all domains on osgeo6 their ssl is about to expire.

I see the certbot auto in the cronjob.

We recommend renewing certificates automatically when they have a third of their total lifetime left. For Let's Encrypt's current 90-day certificates, that means renewing 30 days before expiration. See https://letsencrypt.org/docs/integration-guide/ for details.

docs.geotools.org
drone.osgeo.org
geos.osgeo.org
geotools.org
grass.osgeo.org
grasswiki.osgeo.org
lists.osgeo.org
mapserver.gis.umn.edu
mapserver.org
osgeo6.osgeo.osuosl.org
www.geotools.org
www.mapserver.org
www3.mapserver.org

Change History (4)

comment:1 Changed 15 months ago by robe

I went into osgeo6 and did a manual

certbot renew

All renewed except for gdal.org

that is expected since gdal.org letsencrypt was moved to osgeo7. I've removed gdal domain from the server with these commands

a2dissite www.gdal.org.conf
a2dissite www.gdal.org-le-ssl.conf
service apache2 reload
certbot-auto delete --cert-name=gdal.org

strk can we shut off drone.osgeo.org

I'm not sure what's wrong with the cronjob for renewal. At a glance looks right.

comment:2 Changed 15 months ago by robe

Summary: certbot-auto on osgeo6 is not workingcertbot-auto cronjob on osgeo6 is not working

comment:3 Changed 15 months ago by strk

strk can we shut off drone.osgeo.org

It looks like php-geos still uses it, I'll have a look about removing it.

comment:4 Changed 14 months ago by robe

Resolution: fixed
Status: newclosed

oops strk missed this note -- I shut it off :(

also now I release I had already deleted gdal.org not sure why it came back again.

At anyrate hoping my changes in #2470 finally fixed this. Going to assume it did and close this out.

Note: See TracTickets for help on using tickets.