[BlueOnyx:23797] Re: 5209R automatic Let's Encrypt renew - webalias redirect turns off and not on again

[Dirk Estenfeld]

Hello, Michael,

yes, I am already aware that it is necessary to deactivate the redirect for the moment of renewal. But if you already disabled it automatically, why don't you enable it again automatically? In my view, that is a mistake.
It can also very easily have a negative effect on the Google listing of a site (duplicate content).
Can you please integrate a check during renewal to see if the "Web Alias redirects" was on and automatically reactivate it after renewal?

Thanks and best regards
Dirk

blackpoint GmbH - Friedberger Straße 106b - 61118 Bad Vilbel

-----Ursprüngliche Nachricht-----
Von: Blueonyx <blueonyx-bounces at mail.blueonyx.it> Im Auftrag von Michael Stauber
Gesendet: Mittwoch, 22. April 2020 19:13
An: blueonyx at mail.blueonyx.it
Betreff: [BlueOnyx:23794] Re: 5209R automatic Let's Encrypt renew - webalias redirect turns off and not on again

Hi Dirk,

> a customer with 5209R servers complained that the check mark "Web
> Alias redirects" disappears when automatically renewing a Let's
> Encrypt certificate and is not automatically set again after the
> automatic renew.  The customer has to go through the pages manually
> and set the hook again. I could also see it on another server of an other customer.
>
> This is not good.

This behavior is exactly as intended and as necessary.

During the domain validation Let's Encrypt must connect not only to FQDN/.well-known/... but also to each and any of the Web Server Aliases in the same manner in order to ckeck if you have ownership of the domain in question.

If "Web Alias redirects" is enabled, the Let's Encrypt validation fails hard due to the redirect.

For that reason each run of Let's Encrypt for a Vsite (initial cert request or renewal) will check the state of "Web Alias redirects" and will disable it as needed.

--
With best regards

Michael Stauber
_______________________________________________
Blueonyx mailing list
Blueonyx at mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx