search

jezdez / caniusepython3.com

A site to check if your Python project is compatible with Python 3
https://caniusepython3.com/
136 stars 18 forks source link

Expired TLS certificate on caniusepython3.com #64

Closed erikagnvall closed 5 years ago

erikagnvall commented 5 years ago

Looks like this was reported before (#63, #62) but now the website uses HSTS so Firefox won't even allow me to add a temporary exception:

screen shot 2018-10-29 at 12 43 28

tricoder42 commented 5 years ago

Hey @Meldanya, sorry, this is really annoying. For some reason --deploy-hook doesn't run after cert renewal.

Server upgraded, rebooted, crontab slightly modified (I'm using systemctl reload nginx instead of nginx -s reload) and we'll see how it goes.

This is the full crontab line:

@monthly certbot renew --deploy-hook "systemctl reload nginx"

Cheers

erikagnvall commented 5 years ago

No problems, I worked around it by installing and running caniusepython3 locally :)

Regarding certbot config, we're running with the nginx plugin which seems to be working fine. Renewing and reloading nginx hasn't hit a snag since the server was installed around a year ago. Not sure how your setup looks but it might be an alternative if it keeps happening?