MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Technical Helps => Topic started by: tonym on 2016-12-08, 14:41:50

Title: Let's Encrypt Renewal
Post by: tonym on 2016-12-08, 14:41:50
I installed a Let's Encrypt certificate using Kloxo about 3 months ago (thanks for the feature!).

Recently I  have been sent emails with the title:
Let's Encrypt certificate expiration notice

Will Kloxo automatically renew the certificate? Or do I need to do something before it expires?
Title: Re: Let's Encrypt Renewal
Post by: MRatWork on 2016-12-08, 15:15:48
By design, It's will renew automatically. Warning from letsencrypt isn't accurate.
Title: Re: Let's Encrypt Renewal
Post by: tonym on 2016-12-08, 15:53:48
Great, thanks!
Title: Re: Let's Encrypt Renewal
Post by: lenawaii on 2016-12-15, 22:03:01
Hi Mustapha,

My let's encrypt certificates expired today and automatic renewal has failed. I had to delete the old one and generate a new one in Kloxo MR 7 and restart Apache.

In Kloxo MR 6.5, I just had to create a shell script:
#!/bin/bash
/root/letsencrypt/letsencrypt-auto renew >> /var/log/letsencrypt.log
service httpd restart

Can you please tell me how ot make automatic? Thanks
Title: Re: Let's Encrypt Renewal
Post by: tonym on 2016-12-16, 11:11:05
Mine expired today too.
Inspired by your post, I ran:
/usr/bin/letsencrypt-auto renew
That did not update the certificate in use on the server though.

I've now deleted and recreated the certificate.

Just a thought: the certificate had today's date as the expire date. As far as the browser was concerned it was expired. Does the auto-renew work before that date, or after it?
Title: Re: Let's Encrypt Renewal
Post by: MRatWork on 2016-12-16, 11:36:29
Try running 'sh /script/fxcron' (also fix for ssl renew cron).
Title: Re: Let's Encrypt Renewal
Post by: MRatWork on 2016-12-16, 11:46:19
For renew under acme.sh, run '/root/acme.sh --renewALL; sh /script/fixssl; sh /script/restart-web'.
Title: Re: Let's Encrypt Renewal
Post by: tonym on 2016-12-16, 11:59:18
Thank you!
Title: Re: Let's Encrypt Renewal
Post by: MRatWork on 2016-12-16, 17:09:45
Update with 'yum clean all; yum update -y' and then run 'sh /script/cleanup'.