<HTML>
<HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
<font size="2">had 2 systems expire today that did not update automatically. both were for the base servers not a vsite. i would not call either a sub domain but a host.domain.com
<br />
<br />--
<br />
Open WebMail Project (<a href="http://openwebmail.org/" target="_blank">http://openwebmail.org</a>)
<br />
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: Brent Epp <brent@pdc.ca>
<br />
To: BlueOnyx General Mailing List <blueonyx@mail.blueonyx.it>
<br />
Sent: Mon, 29 Apr 2019 09:01:38 -0500
<br />
Subject: [BlueOnyx:22858] Re: automatic Let's Encrypt Renewal was did not happen
<br />
<br />>
<tt>I think Dirk might be onto something here.
<br />>
<br />>
We had three certs up for renewal last week, all of which were
all
subdomains. They all failed to renew automatically and had to
be
done by hand in the GUI. A cert expiring today was
renewed
successfully *without* our intervention, but it was a plain
www
domain.
<br />>
<br />>
For informational / troubleshooting purposes:
<br />>
<br />>
The www domain is configured as:
<br />>
- host name 'www'
<br />>
- domain name 'whatever-domain.com'
<br />>
- includes two domain aliases
<br />>
- 'Web Alias Redirects' is OFF
<br />>
- domain and aliases renewed SSL without error
<br />>
<br />>
The subdomains that failed last week:
<br />>
- host name is 'whatever-subdomain'
<br />>
- domain name is 'whatever-domain.com'
<br />>
- is a full vsite (ie.: not using the subdomain feature on
an
existing vsite)
<br />>
- has no domain aliases
<br />>
<br />>
Thanks
<br />>
- Brent
<br />>
</tt>
<br />>
<br />> On 2019-04-27 13:54, Dirk
Estenfeld
wrote:
<br />>
<blockquote type="cite" cite="mid:5119d1c77fbc467e8b32b45d978ac0ea@blackpoint.de">
<pre class="moz-quote-pre" wrap="">Hello,
maybe another issue.
Today there was an automatic renewal of a let's encrypt
certificate.
But the renew was only for domain.tld not for <a class="moz-txt-link-abbreviated" href="http://www.domain.tld/">www.domain.tld</a>
I had manually renew the certificate again to get a le certificate with domain
and <a class="moz-txt-link-abbreviated" href="http://www.domain/">www.domain</a>.
Maybe an issue in the renew
script?
Best
regards,
Dirk
---
blackpoint GmbH – Friedberger Straße 106b – 61118 Bad
Vilbel
-----Ursprüngliche
Nachricht-----
Von: Blueonyx <a class="moz-txt-link-rfc2396E" href="mailto:blueonyx-bounces@mail.blueonyx.it"><blueonyx-bounces@mail.blueonyx.it></a>
Im Auftrag von Brent
Epp
Gesendet: Donnerstag, 25. April 2019
14:37
An: BlueOnyx General Mailing List <a class="moz-txt-link-rfc2396E" href="mailto:blueonyx@mail.blueonyx.it"><blueonyx@mail.blueonyx.it></a>
Betreff: [BlueOnyx:22844] Re: automatic Let's Encrypt Renewal was did not
happen
Our renewals scheduled for today also did not
run.
I can confirm same thing as Colin here: the entries in the LE log suggest that
certs were only renewed when we performed the renewals by hand in the
GUI.
-
Brent
On 2019-04-25 05:55, Colin Jack
wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Hi
Dirk,
On 25/04/2019, 11:07, "Blueonyx on behalf of Dirk Estenfeld" <a class="moz-txt-link-rfc2396E" href="mailto:blueonyx-bounces@mail.blueonyx.itonbehalfofdirk.estenfeld@blackpoint.de"><blueonyx-bounces@mail.blueonyx.it
on behalf of dirk.estenfeld@blackpoint.de></a>
wrote:
Hello,
today a customer resported that a let's encrypt certificate was not
renewed
automatically. The certificate was outdated
today.
We had the same today ... renewed through the GUI fine but automatic had
failed.
LE log suggests the cron job didn't run - only entry in log is from GUI renewal,
but cron log shows acmesh running every
day.
Colin
_______________________________________________
Blueonyx mailing
list
<a class="moz-txt-link-abbreviated" href="mailto:Blueonyx@mail.blueonyx.it">Blueonyx@mail.blueonyx.it</a>
<a class="moz-txt-link-freetext" href="http://mail.blueonyx.it/mailman/listinfo/blueonyx">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a>
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Blueonyx mailing
list
<a class="moz-txt-link-abbreviated" href="mailto:Blueonyx@mail.blueonyx.it">Blueonyx@mail.blueonyx.it</a>
<a class="moz-txt-link-freetext" href="http://mail.blueonyx.it/mailman/listinfo/blueonyx">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a>
</pre>
<br />>
<fieldset class="mimeAttachmentHeader" />
<pre class="moz-quote-pre" wrap="">_______________________________________________
Blueonyx mailing
list
<a class="moz-txt-link-abbreviated" href="mailto:Blueonyx@mail.blueonyx.it">Blueonyx@mail.blueonyx.it</a>
<a class="moz-txt-link-freetext" href="http://mail.blueonyx.it/mailman/listinfo/blueonyx">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a>
</pre>
</blockquote>
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>