Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-03-28, 14:59:02

Author Topic: Let's Encrypt Renewal  (Read 4207 times)

0 Members and 2 Guests are viewing this topic.

Offline tonym

  • Valuable Member
  • *
  • Posts: 64
  • Karma: +0/-0
    • View Profile
Let's Encrypt Renewal
« on: 2016-12-08, 14:41:50 »
I installed a Let's Encrypt certificate using Kloxo about 3 months ago (thanks for the feature!).

Recently I  have been sent emails with the title:
Let's Encrypt certificate expiration notice

Will Kloxo automatically renew the certificate? Or do I need to do something before it expires?

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Let's Encrypt Renewal
« Reply #1 on: 2016-12-08, 15:15:48 »
By design, It's will renew automatically. Warning from letsencrypt isn't accurate.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline tonym

  • Valuable Member
  • *
  • Posts: 64
  • Karma: +0/-0
    • View Profile
Re: Let's Encrypt Renewal
« Reply #2 on: 2016-12-08, 15:53:48 »
Great, thanks!

Offline lenawaii

  • Valuable Member
  • *
  • Posts: 102
  • Karma: +0/-0
    • View Profile
Re: Let's Encrypt Renewal
« Reply #3 on: 2016-12-15, 22:03:01 »
Hi Mustapha,

My let's encrypt certificates expired today and automatic renewal has failed. I had to delete the old one and generate a new one in Kloxo MR 7 and restart Apache.

In Kloxo MR 6.5, I just had to create a shell script:
#!/bin/bash
/root/letsencrypt/letsencrypt-auto renew >> /var/log/letsencrypt.log
service httpd restart

Can you please tell me how ot make automatic? Thanks

Offline tonym

  • Valuable Member
  • *
  • Posts: 64
  • Karma: +0/-0
    • View Profile
Re: Let's Encrypt Renewal
« Reply #4 on: 2016-12-16, 11:11:05 »
Mine expired today too.
Inspired by your post, I ran:
/usr/bin/letsencrypt-auto renew
That did not update the certificate in use on the server though.

I've now deleted and recreated the certificate.

Just a thought: the certificate had today's date as the expire date. As far as the browser was concerned it was expired. Does the auto-renew work before that date, or after it?
« Last Edit: 2016-12-16, 11:52:14 by tonym »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Let's Encrypt Renewal
« Reply #5 on: 2016-12-16, 11:36:29 »
Try running 'sh /script/fxcron' (also fix for ssl renew cron).
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Let's Encrypt Renewal
« Reply #6 on: 2016-12-16, 11:46:19 »
For renew under acme.sh, run '/root/acme.sh --renewALL; sh /script/fixssl; sh /script/restart-web'.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline tonym

  • Valuable Member
  • *
  • Posts: 64
  • Karma: +0/-0
    • View Profile
Re: Let's Encrypt Renewal
« Reply #7 on: 2016-12-16, 11:59:18 »
Thank you!

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Let's Encrypt Renewal
« Reply #8 on: 2016-12-16, 17:09:45 »
Update with 'yum clean all; yum update -y' and then run 'sh /script/cleanup'.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

 


MRatWork Affiliates:    BIGRAF(R) Inc.    House of LMAR    EFARgrafix

Page created in 0.076 seconds with 17 queries.

web stats analysis