Lets Encrypt Cert Expiring

alex.olynyk

I got an e-mail stating my LetsEncrypt certificate will expire in 17 days (on 21 Aug 16 14:29 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors.

How do I renew?

dafyre

If you know which server the certificate is one, you should just rerun the letsencrypt command line that you used when you originally set up the website, I think.

wirestyle22

Did you guys use Certbot? Isn't that the updated Let's Encrypt? I tried doing it and could never get it to work.

dafyre

I'm still using letsencrypt-auto.

wirestyle22

@dafyre You set up auto-renew. I'm sure it will work but if I try to do that it tells me its an old package and won't apply.

alex.olynyk

I had to install certbot again. For some reason it wasnt there anymore. Then I ran ./letsencrypt-auto and got it renewed for another 3 months. Thanks everyone.

travisdh1

Well, certbot is in one of the normal repositories I use now. So just make sure you have it installed and up to date. Then you just need to add it in a crontab. I just run it once a day, as it won't actually renew till 30 days before the current cert expires.

* 20 * * * /usr/bin/certbot renew --quiet

dafyre

It Certbot compatible with the config files that I built for Letsencrypt?

travisdh1

@dafyre said in Lets Encrypt Cert Expiring:

It Certbot compatible with the config files that I built for Letsencrypt?

Hrm, I switched hosting providers between using the two of them. It should be, but I didn't test!

JaredBusch

@travisdh1 said in Lets Encrypt Cert Expiring:

@dafyre said in Lets Encrypt Cert Expiring:

It Certbot compatible with the config files that I built for Letsencrypt?

Hrm, I switched hosting providers between using the two of them. It should be, but I didn't test!

Got the renew email myself yesterday. I really need to look at updating to certbot from doing it all manual.

wirestyle22

@JaredBusch Any possibility of you creating a guide? That would help me greatly.

JaredBusch

@wirestyle22 said in Lets Encrypt Cert Expiring:

@JaredBusch Any possibility of you creating a guide? That would help me greatly.

for the manual renew? or converting? I will most likely manually renew once I am back at my desk tomorrow.

travisdh1

@wirestyle22 said in Lets Encrypt Cert Expiring:

@JaredBusch Any possibility of you creating a guide? That would help me greatly.

yum install certbot

Replace certbot in any scripts you've written using the previous tools.

wirestyle22

@travisdh1 said in Lets Encrypt Cert Expiring:

@wirestyle22 said in Lets Encrypt Cert Expiring:

@JaredBusch Any possibility of you creating a guide? That would help me greatly.
yum install certbot
Replace certbot in any scripts you've written using the previous tools.

When I Attempted this I followed these directions: https://certbot.eff.org/#centosrhel7-apache

Could not get it to work.

travisdh1

@wirestyle22 said in Lets Encrypt Cert Expiring:

@travisdh1 said in Lets Encrypt Cert Expiring:
@wirestyle22 said in Lets Encrypt Cert Expiring:

@JaredBusch Any possibility of you creating a guide? That would help me greatly.
yum install certbot
Replace certbot in any scripts you've written using the previous tools.
When I Attempted this I followed these directions: https://certbot.eff.org/#centosrhel7-apache

Could not get it to work.

It's VERY touchy about having your http.conf file(s) all entered correctly. That was my issue the first time I tried to use it on a server at least.

JaredBusch

@travisdh1 said in Lets Encrypt Cert Expiring:

@wirestyle22 said in Lets Encrypt Cert Expiring:

@JaredBusch Any possibility of you creating a guide? That would help me greatly.
yum install certbot
Replace certbot in any scripts you've written using the previous tools.

I've not scripted anything with LE yet. This is only the second renew since it was released.

My machine with all the certs is running an Nginx proxy and that was not supported at release.

The first renew, I forgot about and just manually did it the day before it all expired.

I will have to look and see what certbot will try and do with my manual setup prior to actually trying to use it.

wirestyle22

@travisdh1 said in Lets Encrypt Cert Expiring:

@wirestyle22 said in Lets Encrypt Cert Expiring:
@travisdh1 said in Lets Encrypt Cert Expiring:
@wirestyle22 said in Lets Encrypt Cert Expiring:

@JaredBusch Any possibility of you creating a guide? That would help me greatly.
yum install certbot
Replace certbot in any scripts you've written using the previous tools.
When I Attempted this I followed these directions: https://certbot.eff.org/#centosrhel7-apache

Could not get it to work.
It's VERY touchy about having your http.conf file(s) all entered correctly. That was my issue the first time I tried to use it on a server at least.

I think you and I went over this together and I literally copy and pasted what you gave me, editing as needed for URL's etc. It still didn't work for me. Idk

travisdh1

@wirestyle22 said in Lets Encrypt Cert Expiring:

@travisdh1 said in Lets Encrypt Cert Expiring:
@wirestyle22 said in Lets Encrypt Cert Expiring:
@travisdh1 said in Lets Encrypt Cert Expiring:
@wirestyle22 said in Lets Encrypt Cert Expiring:

@JaredBusch Any possibility of you creating a guide? That would help me greatly.
yum install certbot
Replace certbot in any scripts you've written using the previous tools.
When I Attempted this I followed these directions: https://certbot.eff.org/#centosrhel7-apache

Could not get it to work.
It's VERY touchy about having your http.conf file(s) all entered correctly. That was my issue the first time I tried to use it on a server at least.
I think you and I went over this together and I literally copy and pasted what you gave me, editing as needed for URL's etc. It still didn't work for me. Idk

See what I mean about it being very touchy? I don't even know enough about the httpd .conf files to but muddle through apparently.

wirestyle22

@travisdh1 said in Lets Encrypt Cert Expiring:

@wirestyle22 said in Lets Encrypt Cert Expiring:
@travisdh1 said in Lets Encrypt Cert Expiring:
@wirestyle22 said in Lets Encrypt Cert Expiring:
@travisdh1 said in Lets Encrypt Cert Expiring:
@wirestyle22 said in Lets Encrypt Cert Expiring:

@JaredBusch Any possibility of you creating a guide? That would help me greatly.
yum install certbot
Replace certbot in any scripts you've written using the previous tools.
When I Attempted this I followed these directions: https://certbot.eff.org/#centosrhel7-apache

Could not get it to work.
It's VERY touchy about having your http.conf file(s) all entered correctly. That was my issue the first time I tried to use it on a server at least.
I think you and I went over this together and I literally copy and pasted what you gave me, editing as needed for URL's etc. It still didn't work for me. Idk
See what I mean about it being very touchy? I don't even know enough about the httpd .conf files to but muddle through apparently.

I looked up a bunch of different guides. Went through it over and over and over again. Never got it working unfortunately. I never figured out what I was doing wrong unfortunately.

travisdh1

@wirestyle22 said in Lets Encrypt Cert Expiring:

@travisdh1 said in Lets Encrypt Cert Expiring:
@wirestyle22 said in Lets Encrypt Cert Expiring:
@travisdh1 said in Lets Encrypt Cert Expiring:
@wirestyle22 said in Lets Encrypt Cert Expiring:
@travisdh1 said in Lets Encrypt Cert Expiring:
@wirestyle22 said in Lets Encrypt Cert Expiring:

@JaredBusch Any possibility of you creating a guide? That would help me greatly.
yum install certbot
Replace certbot in any scripts you've written using the previous tools.
When I Attempted this I followed these directions: https://certbot.eff.org/#centosrhel7-apache

Could not get it to work.
It's VERY touchy about having your http.conf file(s) all entered correctly. That was my issue the first time I tried to use it on a server at least.
I think you and I went over this together and I literally copy and pasted what you gave me, editing as needed for URL's etc. It still didn't work for me. Idk
See what I mean about it being very touchy? I don't even know enough about the httpd .conf files to but muddle through apparently.
I looked up a bunch of different guides. Went through it over and over and over again. Never got it working unfortunately. I never figured out what I was doing wrong unfortunately.

Yeah, the error messages you get from Let's Encrypt are about worthless. Apache was happy with the conf files, why is certbot throwing errors?