Page 1 of 1

Auto renew SSL doesn't work

Posted: Sat Mar 11, 2017 9:31 pm
by vesta_mtl
Hello all,

I have a domain where the SSL will expire in 24 hours. I recently migrated it to this server, so I understand that Vesta didn't auto-renew it yet.

But if I try to manually trigger the auto renew now using v-update-letsencrypt-ssl, it does nothing (immediately returns to the prompt with no error, and doesn't update the SSL).

Looking at the code for v-update-letsencrypt-ssl, I see it should loop through each user, and then check the expiration date of any domains, and if <31, trigger this:

Code: Select all

v-add-letsencrypt-domain $user $domain $aliases


I can confirm that the user exists by running this:

Code: Select all

v-list-users
I can confirm that the SSL is attributed to this user and expiring tomorrow by running this:

Code: Select all

openssl x509 -enddate -noout -in /usr/local/vesta/data/users/my_user/ssl/my_user_domain.com.pem
So I am not sure why v-update-letsencrypt-ssl is not handling this as designed and renewing the SSL for the domain.

Thanks in advance, and thank you for this excellent Control Panel.

Re: Auto renew SSL doesn't work

Posted: Sat Mar 11, 2017 10:05 pm
by skurudo

Code: Select all

I have a domain where the SSL will expire in 24 hours. I recently migrated it to this server, so I understand that Vesta didn't auto-renew it yet.
Domain with LE certificate and this certificate expire soon? Correct?
And there is no domains with LE certificates?

PS: I suggest disable SSL support and enable again.

Re: Auto renew SSL doesn't work

Posted: Sat Mar 11, 2017 11:53 pm
by vesta_mtl
Yes that is correct.

Your PS suggestion would just recreate the SSL, right? This is equivalent to just doing v-add-letsencrypt-domain. Yes this would probably work. But before doing that I prefer to understand why the update doesn't work.

Thanks.

Re: Auto renew SSL doesn't work

Posted: Sun Mar 12, 2017 2:28 pm
by vesta_mtl
This problem is resolved, I think the issue was that when I migrated the website, "Let's Encrypt Support" was not checked. And so that is why it wasn't updating it automatically. I just unchecked and then re-checked SSL support (with "Let's Encrypt Support" checked) and it re-issued a new Let's Encrypt SSL certificate. Thanks for the help and the great tool.

Re: Auto renew SSL doesn't work

Posted: Mon Mar 13, 2017 7:30 am
by locus
Others have this issue including me, no migration involved.
End result is you have to disable and re-enable LE for every domain to renew the cert.

Lets hope there is a fix coming :)

Re: Auto renew SSL doesn't work

Posted: Mon Mar 13, 2017 11:56 am
by vesta_mtl
I'll report back on May 7th when many of my sites will have entered the 31-day window and should theoretically be auto-renewed by Vesta.

Re: Auto renew SSL doesn't work

Posted: Wed Mar 15, 2017 6:39 am
by skurudo
Ok, let's wait update and see, bug or not ;-)

Re: Auto renew SSL doesn't work

Posted: Wed Mar 15, 2017 4:38 pm
by vesta_mtl
Sounds good! I must say again how much I like Vesta CP, it works extremely well, the backups are an amazing tool and I can easily restore entire sites in no time.

I configured dropbox uploader to send the latest backup for each hosted website to my Dropbox account every night. If I wanted to share this code with the community, where should I post it?

Thanks again.

Re: Auto renew SSL doesn't work

Posted: Thu Mar 16, 2017 1:22 pm
by skurudo
vesta_mtl wrote: I configured dropbox uploader to send the latest backup for each hosted website to my Dropbox account every night. If I wanted to share this code with the community, where should I post it?
I think it's 3rd party -> viewforum.php?f=19

PS: Thanks for nice words ;-)

Re: Auto renew SSL doesn't work

Posted: Fri Mar 17, 2017 2:50 pm
by vesta_mtl
Thanks. I have posted the tutorial here: viewtopic.php?f=19&t=14123