[SAC] osgeo.org certificate?
Regina Obe
lr at pcorp.us
Mon Jan 28 14:41:17 PST 2019
Sorry all. Guess late to the party on this.
Yes I did setup the staging.2018.foss4g.org I thought I had shut that down and revoked it a while ago though.
Yes I did get notices about letsencrypt old certbot will no longer be supported.
I only got a notice about the limesurvey.osgeo.org one though which is on funtoo which I'll check on before it expires. That one is due to expire in March 1,2019.
From: Jody Garnett [mailto:jody.garnett at gmail.com]
Sent: Sunday, January 27, 2019 10:36 PM
To: Alex Mandel <tech at wildintellect.com>; System Administration Committee Discussion/OSGeo <sac at lists.osgeo.org>
Cc: Michael Smith <michael.smith.erdc at gmail.com>; Regina Obe <lr at pcorp.us>; Sandro Santilli <strk at osgeo.org>
Subject: Re: [SAC] osgeo.org certificate?
Thank you everyone
--
Jody Garnett
On Sun, 27 Jan 2019 at 20:19, Alex Mandel <tech_dev at wildintellect.com <mailto:tech_dev at wildintellect.com> > wrote:
Ok, I've fixed it. I think apache was failing to load the renewed
certificate, 2 possible reasons:
1. certbot was really old version, now upgraded via apt-get, did a dry
run of the renew which didn't find any expired certs.
2. apache had a staging.2018.foss4g.org-le-ssl.conf enabled, but not
matching certificate. I removed it from sites enabled and reloaded
apache. We can re-enable if we need.
So fixed, and should stay fixed.
Thanks,
Alex
On 1/27/19 5:38 PM, Alex Mandel wrote:
> On 1/27/19 5:18 PM, Michael Smith wrote:
>> The certificate expired today. The cron to update the cert must not be
>> running or the process is failing.
>>
>> Michael Smith
>>
>>> On Jan 27, 2019, at 6:02 PM, Jody Garnett <jody.garnett at gmail.com <mailto:jody.garnett at gmail.com> >
>>> wrote:
>>>
>>> I got a warning that the certificate had expired just now, but I am
>>> travelling so it may be a false positive. Can we check please?
>>> --
>>> --
>>> Jody Garnett
>
>
> There was a warning email from lets encrypt (I got on my personal
> accounts). If using certbot it need to be updated so that a new method
> of renenwal is used.
>
> Sandro or Regina, did you set this one up?
>
> Thanks,
> Alex
> _______________________________________________
> Sac mailing list
> Sac at lists.osgeo.org <mailto:Sac at lists.osgeo.org>
> https://lists.osgeo.org/mailman/listinfo/sac
_______________________________________________
Sac mailing list
Sac at lists.osgeo.org <mailto:Sac at lists.osgeo.org>
https://lists.osgeo.org/mailman/listinfo/sac
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20190128/71e15afc/attachment.html>
More information about the Sac
mailing list