Opened 7 years ago

Closed 7 years ago

Last modified 4 years ago

#3691 closed defect (fixed)

debbie.postgis.net ssl has expired

Reported by: robe Owned by: strk
Priority: blocker Milestone: Website Management, Bots
Component: management Version: 2.3.x
Keywords: Cc:

Description

strk,

You want to renew this. Not sure the process.

When I go to jenkins via https, it no longer works.

I get this message about the certificate:

Subject: debbie.postgis.net
Issuer: Let's Encrypt Authority X3
Expires on: Jan 8, 2017
Current date: Jan 21, 2017

Can you renew it.

Change History (3)

comment:1 by robe, 7 years ago

Resolution: fixed
Status: newclosed
Version: 2.3.x

That was easier than I thought.

ran -

letsencrypt renew

on server and now done.

Looks like it's good for 3 months so we should probably set a cronjob to renew every 3 months.

Wonder if we should just add this as a cronjob

Last edited 7 years ago by robe (previous) (diff)

comment:2 by strk, 7 years ago

The cronjob is in place already:

# Every month (the 8th), renew letsencrypt certificates
30 1 8 * * letsencrypt renew >> /var/log/le-renew.log

But, it looks like something is not working as expected:

-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/debbie.postgis.net.conf
-------------------------------------------------------------------------------

All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/debbie.postgis.net/fullchain.pem (failure)

The /var/log/letsencrypt/letsencrypt.log.3 file seems to contain the verbose logs of the operation:

2017-01-08 01:30:05,899:WARNING:letsencrypt.renewal:Attempting to renew cert from /etc/letsencrypt/renewal/debbie.postgis.net.conf produced an unexpected error: The apache plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError(). Skipping.
2017-01-08 01:30:05,906:DEBUG:letsencrypt.renewal:Traceback was:
Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/letsencrypt/renewal.py", line 342, in renew_all_lineages
    main.obtain_cert(lineage_config, plugins, renewal_candidate)
  File "/usr/lib/python2.7/dist-packages/letsencrypt/main.py", line 500, in obtain_cert
    installer, auth = plug_sel.choose_configurator_plugins(config, plugins, "certonly")
  File "/usr/lib/python2.7/dist-packages/letsencrypt/plugins/selection.py", line 196, in choose_configurator_plugins
    diagnose_configurator_problem("authenticator", req_auth, plugins)
  File "/usr/lib/python2.7/dist-packages/letsencrypt/plugins/selection.py", line 273, in diagnose_configurator_problem
    raise errors.PluginSelectionError(msg)
PluginSelectionError: The apache plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError()

Seems to be a known issue: https://github.com/certbot/certbot/issues/1833

I've set the PATH in the crontab, we'll see on Feb 8th if it all works fine

comment:3 by robe, 4 years ago

Milestone: Management 2.0Website Management, Bots

Milestone renamed

Note: See TracTickets for help on using tickets.