sec_error_expired_certificate on the clients landing page. auto-renew was supposed to prevent this!

Solvedcertificatelets-encryptssl37 replies · 660 views · started
  1. ugh. reading this at 2am instead of sleeping, no regrets

    30 0 helpful
  2. with Certbot, run sudo certbot renew --dry-run to see whether renewal would work right now 😂 check the timer with systemctl list-timers | grep certbot. Common failures: port 80 blocked by a firewall, a redirect rule that breaks /.well-known/acme-challenge/, or DNS now poniting somewhere else. hope that helps :)

    0 11 helpful
  3. Accepted solution

    ok so see exactly what the server prseents: openssl s_client -connect example.com:443 -servername example.com </dev/null | openssl x509 -noout -subject -issuer -dates -ext subjectAltName... that shows the expiry date and which names the cert coevrs ;) if it differs from the files on disk, teh web server isnt using the renewed cert.

    thinking

    0 4 helpful
  4. ok so reading this at 2am instead of sleeping, no regrets thx in advance!!

    cry

    4 2 helpful
  5. guys pls help reading this at 2am instead of sleeping, no regrets

    1 1 helpful
  6. i come back to this thread every week just for the drama

    5 0 helpful
  7. 🤔

    6 5 helpful
  8. my laptop is officially haunted

    1 0 helpful
  9. wait dumb question but how do i even check the cable ??

    0 1 helpful
  10. @slopez_30 works on paper, not in real life idk maybe im wrong lol

    2 0 helpful
  11. same issue here on my gaming rig. glad im not the only one

    4 0 helpful
  12. reading this at 2am instead of sleeping, no regrets any ideas??

    1 0 helpful
  13. @nimbus_garage384 reloaded the web server and teh new certificate showed up instantly. added the deploy hook so it happens automatically from now on. thank you!

    6 0 helpful

Reply to this topic

Sign in or create an account to reply.