SSL Certs didn't update on theyvoteforyou.org.au

jamezpolley commented 4 years ago

@mlandauer reported that SSL certs expired on theyvoteforyou.org.au a few days ago.

A) This should have happened automatically, what broke?

B) Docs about this were insufficient for him to be able to figure out the current state of cert generation so he ended up having to manually renew the cert. Plzfix

jamezpolley commented 4 years ago

A) turns out to be because TVFY was missed in 5dc776c; 9d251b5 fixes this.

I was able to use the some command as in #146 to force the renewal, and I've confirmed that it's now got the nginx plugin specified in the renewal config

root@ip-172-31-37-36:/var/log/letsencrypt# cat /etc/letsencrypt/renewal/theyvoteforyou.org.au.conf 
# renew_before_expiry = 30 days
cert = /etc/letsencrypt/live/theyvoteforyou.org.au/cert.pem
privkey = /etc/letsencrypt/live/theyvoteforyou.org.au/privkey.pem
chain = /etc/letsencrypt/live/theyvoteforyou.org.au/chain.pem
fullchain = /etc/letsencrypt/live/theyvoteforyou.org.au/fullchain.pem
version = 0.31.0
archive_dir = /etc/letsencrypt/archive/theyvoteforyou.org.au

# Options and defaults used in the renewal process
[renewalparams]
authenticator = nginx
account = xxx
server = https://acme-v02.api.letsencrypt.org/directory
installer = nginx

jamezpolley commented 4 years ago

https://github.com/openaustralia/infrastructure/blob/master/README.md#forcibly-renewing-letsencrypt-certificates-on-production-servers has updated information about how to renew certificates.

openaustralia / infrastructure

SSL Certs didn't update on theyvoteforyou.org.au #148