I think it’s been years since I’ve seen a let’s encrypt certificate fail to renew, but I’ve had three sites in the past week or two that have stale certificates. A rebuild fixes it and I have heretofore failed to look for clues in the logs. Next time I’ll do a bit more to diagnose the problem befor…

[image] pfaffman: I think it’s been years since I’ve seen a let’s encrypt certificate fail to renew, but I’ve had three sites in the past week or two that have stale certificates. I thnink that this commit solves the problem, and I bet the sites with this issue are before this commit https:/…

Please see: Transitioning to ISRG's Root - Let's Encrypt DST Root CA X3 Expiration (September 2021) - Let's Encrypt

Thanks, Daniela! That does seem like it may be related, but I can’t tell what to do about it or how to know if a site should force getting a new certificate. I just checked a handful of sites and several have renewed in the past few days. I believe in all cases the certificate had expired (I double-…

How old is the Discourse base image in those sites? Please share the exact image tag.

Here’s the list of images from the site that I just upgraded (looks like time for a ./launcher cleanup!). So I guess it was 2.0.20210528-1735? REPOSITORY TAG IMAGE ID CREATED SIZE local_discourse/app latest dab985…

[image] pfaffman: that I just upgraded Oh so the information is lost here. We would need to know which was source of the parent layer of the old local_discourse/app. I have a test site with the latest image and the certificate was renewed last week just fine.

[image] Falco: I have a test site with the latest image and the certificate was renewed last week just fine. Yeah. And I just looked at half a dozen others and they’re all fine too. I guess I should have tagged this #mystery.

I have the same problem. Just rebuild, but my discourse let’s encrypt certificate doesn’t renew. How could I check my installation?

Aha! It’s that error having to do with using ZeroSSL as the default CA. Now I remember that being a problem in the semi-recent past. Here’s one that I haven’t rebuilt yet: root@community:~# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS …

Letsencrypt certificate failure to renew

Support

pfaffman (Jay Pfaffman) October 8, 2021, 1:41pm 11

I thnink that this commit solves the problem, and I bet the sites with this issue are before this commit

https://github.com/discourse/discourse_docker/commit/2909a162475ca0e5cbdb69059ff0254c820b1963

Let's Encrypt cert renewals (suddenly) failing

Topic		Replies	Views
Letsencrypt issues Bug	7	889	September 2, 2021
Discourse failure to renew certificate Bug letsencrypt	25	845	December 27, 2025
Let's Encrypt cert renewals (suddenly) failing Self-hosting	27	3027	January 27, 2022
Installation produced broken, zero byte certificate Self-hosting letsencrypt	10	2194	September 14, 2022
Let's Encrypt renewal errors Self-hosting	11	1907	February 22, 2020

Letsencrypt certificate failure to renew

Related topics