I think it’s been years since I’ve seen a let’s encrypt certificate fail to renew, but I’ve had three sites in the past week or two that have stale certificates. A rebuild fixes it and I have heretofore failed to look for clues in the logs. Next time I’ll do a bit more to diagnose the problem befor…

[图片] pfaffman: I think it’s been years since I’ve seen a let’s encrypt certificate fail to renew, but I’ve had three sites in the past week or two that have stale certificates. I thnink that this commit solves the problem, and I bet the sites with this issue are before this commit …

Please see: Transitioning to ISRG's Root - Let's Encrypt DST Root CA X3 Expiration (September 2021) - Let's Encrypt

Thanks, Daniela! That does seem like it may be related, but I can’t tell what to do about it or how to know if a site should force getting a new certificate. I just checked a handful of sites and several have renewed in the past few days. I believe in all cases the certificate had expired (I double-…

How old is the Discourse base image in those sites? Please share the exact image tag.

Here’s the list of images from the site that I just upgraded (looks like time for a ./launcher cleanup!). So I guess it was 2.0.20210528-1735? REPOSITORY TAG IMAGE ID CREATED SIZE local_discourse/app latest dab985…

[图片] pfaffman: that I just upgraded Oh so the information is lost here. We would need to know which was source of the parent layer of the old local_discourse/app. I have a test site with the latest image and the certificate was renewed last week just fine.

[图片] Falco: I have a test site with the latest image and the certificate was renewed last week just fine. Yeah. And I just looked at half a dozen others and they’re all fine too. I guess I should have tagged this #mystery.

I have the same problem. Just rebuild, but my discourse let’s encrypt certificate doesn’t renew. How could I check my installation?

Aha! It’s that error having to do with using ZeroSSL as the default CA. Now I remember that being a problem in the semi-recent past. Here’s one that I haven’t rebuilt yet: root@community:~# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS …

Let's Encrypt 证书续订失败

支持

pfaffman (Jay Pfaffman) 2021 年10 月 8 日 13:41 11

我认为这个提交解决了该问题，我敢打赌出现此问题的网站都位于该提交之前。

1 个赞

Let's Encrypt cert renewals (suddenly) failing

话题		回复	浏览量
Letsencrypt issues Bug	7	865	2021 年9 月 2 日
Discourse failure to renew certificate Bug letsencrypt	25	713	2025 年12 月 27 日
Let's Encrypt cert renewals (suddenly) failing Self-hosting	27	2921	2022 年1 月 27 日
Installation produced broken, zero byte certificate Self-hosting letsencrypt	10	2166	2022 年9 月 14 日
Let's Encrypt renewal errors Self-hosting	11	1873	2020 年2 月 22 日

Let's Encrypt 证书续订失败

相关话题