Opened 2 years ago

Closed 2 years ago

#2455 closed task (fixed)

certbot-auto cronjob on osgeo6 is not working

Reported by: robe Owned by: sac@…
Priority: normal Milestone: Sysadmin Contract 2020-I
Component: Systems Admin Keywords:
Cc:

Description

Just got a notice from letsencrypt that all domains on osgeo6 their ssl is about to expire.

I see the certbot auto in the cronjob.

We recommend renewing certificates automatically when they have a third of their total lifetime left. For Let's Encrypt's current 90-day certificates, that means renewing 30 days before expiration. See https://letsencrypt.org/docs/integration-guide/ for details.

docs.geotools.org
drone.osgeo.org
geos.osgeo.org
geotools.org
grass.osgeo.org
grasswiki.osgeo.org
lists.osgeo.org
mapserver.gis.umn.edu
mapserver.org
osgeo6.osgeo.osuosl.org
www.geotools.org
www.mapserver.org
www3.mapserver.org

Change History (4)

comment:1 by robe, 2 years ago

I went into osgeo6 and did a manual

certbot renew

All renewed except for gdal.org

that is expected since gdal.org letsencrypt was moved to osgeo7. I've removed gdal domain from the server with these commands

a2dissite www.gdal.org.conf
a2dissite www.gdal.org-le-ssl.conf
service apache2 reload
certbot-auto delete --cert-name=gdal.org

strk can we shut off drone.osgeo.org

I'm not sure what's wrong with the cronjob for renewal. At a glance looks right.

comment:2 by robe, 2 years ago

Summary: certbot-auto on osgeo6 is not workingcertbot-auto cronjob on osgeo6 is not working

comment:3 by strk, 2 years ago

strk can we shut off drone.osgeo.org

It looks like php-geos still uses it, I'll have a look about removing it.

comment:4 by robe, 2 years ago

Resolution: fixed
Status: newclosed

oops strk missed this note -- I shut it off :(

also now I release I had already deleted gdal.org not sure why it came back again.

At anyrate hoping my changes in #2470 finally fixed this. Going to assume it did and close this out.

Note: See TracTickets for help on using tickets.