Auto renew SSL doesn't work

[vesta_mtl]

Hello all,

I have a domain where the SSL will expire in 24 hours. I recently migrated it to this server, so I understand that Vesta didn't auto-renew it yet.

But if I try to manually trigger the auto renew now using v-update-letsencrypt-ssl, it does nothing (immediately returns to the prompt with no error, and doesn't update the SSL).

Looking at the code for v-update-letsencrypt-ssl, I see it should loop through each user, and then check the expiration date of any domains, and if <31, trigger this:

Code: Select all

v-add-letsencrypt-domain $user $domain $aliases

I can confirm that the user exists by running this:

Code: Select all

v-list-users

I can confirm that the SSL is attributed to this user and expiring tomorrow by running this:

Code: Select all

openssl x509 -enddate -noout -in /usr/local/vesta/data/users/my_user/ssl/my_user_domain.com.pem

So I am not sure why v-update-letsencrypt-ssl is not handling this as designed and renewing the SSL for the domain.

Thanks in advance, and thank you for this excellent Control Panel.

[skurudo]

Code: Select all

I have a domain where the SSL will expire in 24 hours. I recently migrated it to this server, so I understand that Vesta didn't auto-renew it yet.

Domain with LE certificate and this certificate expire soon? Correct?
And there is no domains with LE certificates?

PS: I suggest disable SSL support and enable again.

[vesta_mtl]

Yes that is correct.

Your PS suggestion would just recreate the SSL, right? This is equivalent to just doing v-add-letsencrypt-domain. Yes this would probably work. But before doing that I prefer to understand why the update doesn't work.

Thanks.

[vesta_mtl]

This problem is resolved, I think the issue was that when I migrated the website, "Let's Encrypt Support" was not checked. And so that is why it wasn't updating it automatically. I just unchecked and then re-checked SSL support (with "Let's Encrypt Support" checked) and it re-issued a new Let's Encrypt SSL certificate. Thanks for the help and the great tool.

[locus]

Others have this issue including me, no migration involved.
End result is you have to disable and re-enable LE for every domain to renew the cert.

Lets hope there is a fix coming :)

[vesta_mtl]

I'll report back on May 7th when many of my sites will have entered the 31-day window and should theoretically be auto-renewed by Vesta.

[skurudo]

Ok, let's wait update and see, bug or not ;-)

[vesta_mtl]

Sounds good! I must say again how much I like Vesta CP, it works extremely well, the backups are an amazing tool and I can easily restore entire sites in no time.

I configured dropbox uploader to send the latest backup for each hosted website to my Dropbox account every night. If I wanted to share this code with the community, where should I post it?

Thanks again.

[skurudo]

I configured dropbox uploader to send the latest backup for each hosted website to my Dropbox account every night. If I wanted to share this code with the community, where should I post it?

I think it's 3rd party -> viewforum.php?f=19

PS: Thanks for nice words ;-)

[vesta_mtl]

Thanks. I have posted the tutorial here: viewtopic.php?f=19&t=14123