Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LetsEncrypt certificates don´t get renewed #7

Open
tgruenert opened this issue Apr 12, 2021 · 3 comments
Open

LetsEncrypt certificates don´t get renewed #7

tgruenert opened this issue Apr 12, 2021 · 3 comments

Comments

@tgruenert
Copy link
Contributor

LE certificates get created correct. But renew before or after expiring don´t work.

Tracking down the problem
According to https://forum.froxlor.org/index.php?/topic/19536-ssl-le-difference-between-acmesh-and-froxlor-crons/&do=findComment&comment=42474 renewing is independent from creation.

Renew should work only based on acme.sh. This will be triggered from crontab. Crontab looks like

root@server:/.acme.sh# crontab -l
23 0 * * * "//.acme.sh"/acme.sh --cron --home "//.acme.sh" > /dev/null

But:
at directory /.acme.sh/ there are no certs already. The used acme.sh installation is located under /root/.acme.sh/

Question:
What component creates the wrong crontab? And how can this get fixed?

@tgruenert
Copy link
Contributor Author

running "/root/.acme.sh"/acme.sh --cron --home "/root/.acme.sh"
renew all outstanding certificates. after a while these certificates get shown in froxlor. because of a slow file sync mechanic there is a huge delay (not a problem on production).

@tgruenert
Copy link
Contributor Author

Set up a new installation based on docker-compose don´t show this issue.

@tgruenert
Copy link
Contributor Author

looked out for reason of wrong crontab entry without any success. changed crontab by hand to see if this kind of solution would fix the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant