owntracks / quicksetup

A (mostly) automated installer for OwnTracks Recorder, Frontend with MQTT and Let's Encrypt
https://owntracks.org/booklet/guide/quicksetup/
9 stars 3 forks source link

How Quicksetup logs Let's Encrypt certificate renewals #46

Closed jpmens closed 1 month ago

jpmens commented 1 month ago

This process is logged in the file /tmp/lego.log; note that /tmp/ was a deliberate choice to have it cleared out on reboot.

The content of this file increases over time, until it is removed, and can be used to determine whether Let's Encrypt renewals are working.

As an example, this following was logged on one of our systems:

2024-03-18T13:24:53
2024/03/18 14:24:53 No key found for account jane@example. Generating a P256 key.
2024/03/18 14:24:53 Saved key to /usr/local/owntracks/tls/.lego/accounts/acme-v02.api.letsencrypt.org/jane@example/keys/jane@example.key
2024/03/18 14:24:54 [INFO] acme: Registering account for jane@example
!!!! HEADS UP !!!!

Your account credentials have been saved in your Let's Encrypt
configuration directory at "/usr/local/owntracks/tls/.lego/accounts".

You should make a secure backup of this folder now. This
configuration directory will also contain certificates and
private keys obtained from Let's Encrypt so making regular
backups of this folder is ideal.
2024/03/18 14:24:54 [INFO] [example.org] acme: Obtaining bundled SAN certificate
2024/03/18 14:24:54 [INFO] [example.org] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/327752274377
2024/03/18 14:24:54 [INFO] [example.org] acme: Could not find solver for: tls-alpn-01
2024/03/18 14:24:54 [INFO] [example.org] acme: use http-01 solver
2024/03/18 14:24:54 [INFO] [example.org] acme: Trying to solve HTTP-01
2024/03/18 14:24:55 [INFO] [example.org] Served key authentication
2024/03/18 14:24:55 [INFO] [example.org] Served key authentication
2024/03/18 14:24:55 [INFO] [example.org] Served key authentication
2024/03/18 14:25:00 [INFO] [example.org] The server validated our request
2024/03/18 14:25:00 [INFO] [example.org] acme: Validations succeeded; requesting certificates
2024/03/18 14:25:01 [INFO] [example.org] Server responded with a certificate.
2024-03-19T03:23:01
2024/03/19 04:23:02 [example.org] The certificate expires in 89 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-19T09:29:13
2024/03/19 10:29:14 [example.org] The certificate expires in 89 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-20T03:23:01
2024/03/20 04:23:01 [example.org] The certificate expires in 88 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-21T03:23:01
2024/03/21 04:23:02 [example.org] The certificate expires in 87 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-22T03:23:01
2024/03/22 04:23:01 [example.org] The certificate expires in 86 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-23T03:23:01
2024/03/23 04:23:01 [example.org] The certificate expires in 85 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-24T03:23:01
2024/03/24 04:23:02 [example.org] The certificate expires in 84 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-25T03:23:01
2024/03/25 04:23:02 [example.org] The certificate expires in 83 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-26T03:23:01
2024/03/26 04:23:02 [example.org] The certificate expires in 82 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-27T03:23:01
2024/03/27 04:23:01 [example.org] The certificate expires in 81 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-28T03:23:01
2024/03/28 04:23:01 [example.org] The certificate expires in 80 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-29T03:23:01
2024/03/29 04:23:01 [example.org] The certificate expires in 79 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-30T03:23:01
2024/03/30 04:23:02 [example.org] The certificate expires in 78 days, the number of days defined to perform the renewal is 30: no renewal.
2024-03-31T02:23:01
2024/03/31 04:23:01 [example.org] The certificate expires in 77 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-01T02:23:01
2024/04/01 04:23:02 [example.org] The certificate expires in 76 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-02T02:23:01
2024/04/02 04:23:02 [example.org] The certificate expires in 75 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-03T02:23:01
2024/04/03 04:23:01 [example.org] The certificate expires in 74 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-04T02:23:01
2024/04/04 04:23:02 [example.org] The certificate expires in 73 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-05T02:23:01
2024/04/05 04:23:02 [example.org] The certificate expires in 72 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-06T02:23:01
2024/04/06 04:23:02 [example.org] The certificate expires in 71 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-07T02:23:01
2024/04/07 04:23:01 [example.org] The certificate expires in 70 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-08T02:23:01
2024/04/08 04:23:02 [example.org] The certificate expires in 69 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-09T02:23:01
2024/04/09 04:23:02 [example.org] The certificate expires in 68 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-10T02:23:01
2024/04/10 04:23:01 [example.org] The certificate expires in 67 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-11T02:23:01
2024/04/11 04:23:01 [example.org] The certificate expires in 66 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-12T02:23:01
2024/04/12 04:23:02 [example.org] The certificate expires in 65 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-13T02:23:01
2024/04/13 04:23:02 [example.org] The certificate expires in 64 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-14T02:23:01
2024/04/14 04:23:02 [example.org] The certificate expires in 63 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-15T02:23:01
2024/04/15 04:23:07 [example.org] The certificate expires in 62 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-16T02:23:01
2024/04/16 04:23:02 [example.org] The certificate expires in 61 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-16T09:43:53
2024/04/16 11:43:54 [example.org] The certificate expires in 61 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-17T02:23:02
2024/04/17 04:23:02 [example.org] The certificate expires in 60 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-18T02:23:01
2024/04/18 04:23:01 [example.org] The certificate expires in 59 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-19T02:23:01
2024/04/19 04:23:01 [example.org] The certificate expires in 58 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-20T02:23:01
2024/04/20 04:23:02 [example.org] The certificate expires in 57 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-21T02:23:01
2024/04/21 04:23:01 [example.org] The certificate expires in 56 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-22T02:23:01
2024/04/22 04:23:01 [example.org] The certificate expires in 55 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-23T02:23:01
2024/04/23 04:23:02 [example.org] The certificate expires in 54 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-24T02:23:01
2024/04/24 04:23:02 [example.org] The certificate expires in 53 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-25T02:23:01
2024/04/25 04:23:02 [example.org] The certificate expires in 52 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-26T02:23:01
2024/04/26 04:23:01 [example.org] The certificate expires in 51 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-27T02:23:01
2024/04/27 04:23:02 [example.org] The certificate expires in 50 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-28T02:23:01
2024/04/28 04:23:02 [example.org] The certificate expires in 49 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-29T02:23:01
2024/04/29 04:23:01 [example.org] The certificate expires in 48 days, the number of days defined to perform the renewal is 30: no renewal.
2024-04-30T02:23:01
2024/04/30 04:23:01 [example.org] The certificate expires in 47 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-01T02:23:01
2024/05/01 04:23:02 [example.org] The certificate expires in 46 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-02T02:23:01
2024/05/02 04:23:01 [example.org] The certificate expires in 45 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-03T02:23:01
2024/05/03 04:23:02 [example.org] The certificate expires in 44 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-04T02:23:01
2024/05/04 04:23:01 [example.org] The certificate expires in 43 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-05T02:23:01
2024/05/05 04:23:02 [example.org] The certificate expires in 42 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-06T02:23:01
2024/05/06 04:23:01 [example.org] The certificate expires in 41 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-07T02:23:01
2024/05/07 04:23:01 [example.org] The certificate expires in 40 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-08T02:23:01
2024/05/08 04:23:02 [example.org] The certificate expires in 39 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-09T02:23:01
2024/05/09 04:23:02 [example.org] The certificate expires in 38 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-10T02:23:01
2024/05/10 04:23:02 [example.org] The certificate expires in 37 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-11T02:23:01
2024/05/11 04:23:02 [example.org] The certificate expires in 36 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-12T02:23:01
2024/05/12 04:23:02 [example.org] The certificate expires in 35 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-13T02:23:01
2024/05/13 04:23:01 [example.org] The certificate expires in 34 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-14T02:23:01
2024/05/14 04:23:01 [example.org] The certificate expires in 33 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-15T02:23:01
2024/05/15 04:23:02 [example.org] The certificate expires in 32 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-16T02:23:01
2024/05/16 04:23:02 [example.org] The certificate expires in 31 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-17T02:23:01
2024/05/17 04:23:02 [INFO] [example.org] acme: Trying renewal with 730 hours remaining
2024/05/17 04:23:02 [INFO] renewal: random delay of 5m14.287798892s
2024/05/17 04:28:16 [INFO] [example.org] acme: Obtaining bundled SAN certificate
2024/05/17 04:28:17 [INFO] [example.org] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/351713246817
2024/05/17 04:28:17 [INFO] [example.org] acme: Could not find solver for: tls-alpn-01
2024/05/17 04:28:17 [INFO] [example.org] acme: use http-01 solver
2024/05/17 04:28:17 [INFO] [example.org] acme: Trying to solve HTTP-01
2024/05/17 04:28:17 [INFO] [example.org] Served key authentication
2024/05/17 04:28:18 [INFO] [example.org] Served key authentication
2024/05/17 04:28:18 [INFO] [example.org] Served key authentication
2024/05/17 04:28:18 [INFO] [example.org] Served key authentication
2024/05/17 04:28:18 [INFO] [example.org] Served key authentication
2024/05/17 04:28:23 [INFO] [example.org] The server validated our request
2024/05/17 04:28:23 [INFO] [example.org] acme: Validations succeeded; requesting certificates
2024/05/17 04:28:24 [INFO] [example.org] Server responded with a certificate.
2024-05-18T02:23:01
2024/05/18 04:23:02 [example.org] The certificate expires in 88 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-19T02:23:01
2024/05/19 04:23:01 [example.org] The certificate expires in 87 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-20T02:23:01
2024/05/20 04:23:01 [example.org] The certificate expires in 86 days, the number of days defined to perform the renewal is 30: no renewal.
2024-05-21T02:23:01
...