Koozali.org: home of the SME Server

Renewing letsencrypt certificate

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: Renewing letsencrypt certificate
« Reply #30 on: October 16, 2021, 11:41:42 AM »
If it all works then follow the wiki to set status from test to enabled and generate the real certificates.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline Jean-Philippe Pialasse

  • *
  • 2,743
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Renewing letsencrypt certificate
« Reply #31 on: October 16, 2021, 04:20:18 PM »
still as said by Reetp as all is working now you need to switch from test to production.


Code: [Select]
status=test
means you are still in test mode.

follow wiki to go from test to enabled

Offline JRBATM20192021

  • ***
  • 111
  • +0/-0
Re: Renewing letsencrypt certificate
« Reply #32 on: October 17, 2021, 10:55:55 PM »
Alright Will do Thanks.

Offline JRBATM20192021

  • ***
  • 111
  • +0/-0
Re: Renewing letsencrypt certificate
« Reply #33 on: October 18, 2021, 05:15:18 AM »
Thanks for pointing out the test thing so that I would look into it.
I had copied that from sages up above from Oct 14 to ask if that was the code I needed to use to check before I realized I had gotten an email saying that it checked if the certificate was expired and if it needed to be updated.....
So all is well!
This is what mine says from my server so I assume I am good to go!!

[root@www ~]# config show letsencrypt
letsencrypt=service
    ACCEPT_TERMS=yes
    API=2
    configure=none
    email=admin@domain1.com
    hookScript=disabled
    keysize=NUMBER
    signal-event=console-save
    status=enabled

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: Renewing letsencrypt certificate
« Reply #34 on: October 18, 2021, 10:20:31 AM »
Did you follow the wiki to enable production mode? No errors?

If yes and the output was as expected sit back and wait :-)
--
qui scribit bis legit

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: Renewing letsencrypt certificate
« Reply #35 on: October 18, 2021, 11:31:14 AM »
[root@www ~]# config show letsencrypt
letsencrypt=service

    signal-event=console-save


I don't think this is in the documentation (a reason to read really carefully)

At some stage you have messed up commands. You probably did this:

Code: [Select]
config setprop letsencrypt signal-event console-save
It won't do any damage but better to remove it like this:

Code: [Select]
config delprop letsencrypt signal-event
Make sure it has gone:

Code: [Select]
config show letsencrypt
Then just update to make sure:

Code: [Select]
signal-event console-save
Once you set it from 'test' to 'enabled' you did run dehydrated again - as per the wiki - to force it to generate 'real' certificates instead of 'test' ones?

...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline JRBATM20192021

  • ***
  • 111
  • +0/-0
Re: Renewing letsencrypt certificate
« Reply #36 on: November 25, 2021, 06:13:45 AM »
Okay I don't know why I missed this back last month oops but oh well!! Okay I did what you said. Shouldn't hurt anything right? :) I have been getting the email every week about Checking for renewal but then skipping because its not Jan 12th yet. So i think it is working correctly...

Also yes I ran the dehydrated again so it generated the real certificates so all good there!

Thanks

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: Renewing letsencrypt certificate
« Reply #37 on: November 25, 2021, 08:30:58 AM »
Also yes I ran the dehydrated again so it generated the real certificates so all good there!
Thanks

Warning Will Robinson, check forum for other threads re dehydrated update and what that can do..do take note..
--
qui scribit bis legit