I think it’s been years since I’ve seen a let’s encrypt certificate fail to renew, but I’ve had three sites in the past week or two that have stale certificates. A rebuild fixes it and I have heretofore failed to look for clues in the logs. Next time I’ll do a bit more to diagnose the problem befor…

[imagen] pfaffman: I think it’s been years since I’ve seen a let’s encrypt certificate fail to renew, but I’ve had three sites in the past week or two that have stale certificates. I thnink that this commit solves the problem, and I bet the sites with this issue are before this commit …

Please see: Transitioning to ISRG's Root - Let's Encrypt DST Root CA X3 Expiration (September 2021) - Let's Encrypt

Thanks, Daniela! That does seem like it may be related, but I can’t tell what to do about it or how to know if a site should force getting a new certificate. I just checked a handful of sites and several have renewed in the past few days. I believe in all cases the certificate had expired (I double-…

How old is the Discourse base image in those sites? Please share the exact image tag.

Here’s the list of images from the site that I just upgraded (looks like time for a ./launcher cleanup!). So I guess it was 2.0.20210528-1735? REPOSITORY TAG IMAGE ID CREATED SIZE local_discourse/app latest dab985…

[imagen] pfaffman: that I just upgraded Oh so the information is lost here. We would need to know which was source of the parent layer of the old local_discourse/app. I have a test site with the latest image and the certificate was renewed last week just fine.

[imagen] Falco: I have a test site with the latest image and the certificate was renewed last week just fine. Yeah. And I just looked at half a dozen others and they’re all fine too. I guess I should have tagged this #mystery.

I have the same problem. Just rebuild, but my discourse let’s encrypt certificate doesn’t renew. How could I check my installation?

Aha! It’s that error having to do with using ZeroSSL as the default CA. Now I remember that being a problem in the semi-recent past. Here’s one that I haven’t rebuilt yet: root@community:~# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS …

Fallo en la renovación del certificado de Let's Encrypt

Soporte

pfaffman (Jay Pfaffman) 8 Octubre, 2021 13:41 11

Pienso que este commit resuelve el problema, y apuesto a que los sitios con este problema son anteriores a este commit.

Let's Encrypt cert renewals (suddenly) failing

Tema		Respuestas	Vistas
Letsencrypt issues Bug	7	878	2 Septiembre 2021
Discourse failure to renew certificate Bug letsencrypt	25	748	27 Diciembre 2025
Let's Encrypt cert renewals (suddenly) failing Self-hosting	27	2962	27 Enero 2022
Installation produced broken, zero byte certificate Self-hosting letsencrypt	10	2179	14 Septiembre 2022
Let's Encrypt renewal errors Self-hosting	11	1891	22 Febrero 2020

Fallo en la renovación del certificado de Let's Encrypt

Temas relacionados