[SAC] [OSGeo] #2256: Migrate All HTTPS Certs to Lets Encrypt

[OSGeo]

#2256: Migrate All HTTPS Certs to Lets Encrypt
---------------------------+---------------------------------------
 Reporter:  wildintellect  |       Owner:  robe
     Type:  task           |      Status:  new
 Priority:  normal         |   Milestone:  Sysadmin Contract 2019-I
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+---------------------------------------

Comment (by robe):

 Moved trac.osgeo.org, svn.osgeo.org, git.osgeo.org to LetsEncrypt.

 Note I had to copy the certbot-auto from webextra because the one you pull
 from letsencrypt doesn't work with Debian Wheezy which is running on trac
 and set to not auto-upgrade.  Added to crontab to auto renew

 Installed the new certs with these commands
 {{{
 certbot-auto -d svn.osgeo.org --no-self-upgrade
 certbot-auto -d trac.osgeo.org --no-self-upgrade
 certbot-auto -d git.osgeo.org --no-self-upgrade
 }}}

 I did not both with I also had to bundle the trac.openlayers.org,
 svn.openlayers.org  but those will need to be bundled.  Not sure they are
 even still in use..

 I think we will be coming close to our cap of renewals - as it's 5 every 7
 days.

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2256#comment:5>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.