[BlueOnyx:23115] Re: LetsEncrypt Auto Update Failed

[Greg Kuhnert]

I have one suggestion based on something that impacted me. I had a cron.daily cron job that was hung. In the current version of cron, that prevents the next day’s cron from running. And the next, and the next, and so on.

As lets encrypt is served by cron, the updates were not running.

If you’re debugging lats encrypt and it works in the GUI or via CLI… but not automatically, that’s another one to check that can help.

GK

> On 13 Aug 2019, at 7:14 am, Brent Epp <brent at pdc.ca> wrote:
> 
> Can confirm, we had some auto-renew failures a few weeks ago as well.  Did the same thing: went through the BX GUI and it updated no problem.
> 
> Some of our vsites fail with auto-renew, some don't.  I've gone through each vsite and ensured that `DOCROOT/.well-known` is publicly accessible over a non-SSL connection and not blocked by a server or application config.
> 
> I can't find the common factor.
> 
>  - Brent
> 
> On 2019-08-12 16:08, Philip Hamer wrote:
>> Good evening.
>> 
>> One of my hosts threw an error during an automatic Lets Encrypt SSL update.
>> I tried a manual update via the GUI and it still would not update.
>> I re-booted the server (thinking this might fix things) then the site showed an NGINX error for the site.
>> Yikes.
>> 
>> I went back into the GUI, selected the site in question then went to SSL.
>> Selected the LetsEncrypt tab.
>> Under SSL Domain Aliases I clicked Remove All.
>> Ticked Request Or Renew Certificate.
>> Clicked Save
>> Waited and it updated.
>> 
>> The site came back to life.
>> Quick check on Chrome gave me the padlock back and the correct expiry date.
>> 
>> This was the first time fail for me for an LE certificate update.
>> Auto updates have always worked.
>> 
>> The above may be useful to someone for a quick fix if it happens to you.
>> 
>>  
>> 
>> Kind Regards,
>> 
>>  
>> 
>> PHILIP HAMER
>> PW Maintenance
>> https://www.warmairheaters.com <https://www.warmairheaters.com/>
>> 
>> 
>> _______________________________________________
>> Blueonyx mailing list
>> Blueonyx at mail.blueonyx.it <mailto:Blueonyx at mail.blueonyx.it>
>> http://mail.blueonyx.it/mailman/listinfo/blueonyx <http://mail.blueonyx.it/mailman/listinfo/blueonyx>
> 
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20190813/c0fc0227/attachment.html>