Topic: Renewing letsencrypt certificate

[ReetP]

If it all works then follow the wiki to set status from test to enabled and generate the real certificates.

[Jean-Philippe Pialasse]

still as said by Reetp as all is working now you need to switch from test to production.

Code: [Select]

status=test
means you are still in test mode.

follow wiki to go from test to enabled

[JRBATM20192021]

Alright Will do Thanks.

[JRBATM20192021]

Thanks for pointing out the test thing so that I would look into it.
I had copied that from sages up above from Oct 14 to ask if that was the code I needed to use to check before I realized I had gotten an email saying that it checked if the certificate was expired and if it needed to be updated.....
So all is well!
This is what mine says from my server so I assume I am good to go!!

[root@www ~]# config show letsencrypt
letsencrypt=service
    ACCEPT_TERMS=yes
    API=2
    configure=none
    email=admin@domain1.com
    hookScript=disabled
    keysize=NUMBER
    signal-event=console-save
    status=enabled

[TerryF]

Did you follow the wiki to enable production mode? No errors?

If yes and the output was as expected sit back and wait

[ReetP]

[root@www ~]# config show letsencrypt
letsencrypt=service

    signal-event=console-save

I don't think this is in the documentation (a reason to read really carefully)

At some stage you have messed up commands. You probably did this:

Code: [Select]

config setprop letsencrypt signal-event console-save
It won't do any damage but better to remove it like this:

Code: [Select]

config delprop letsencrypt signal-event
Make sure it has gone:

Code: [Select]

config show letsencrypt
Then just update to make sure:

Code: [Select]

signal-event console-save
Once you set it from 'test' to 'enabled' you did run dehydrated again - as per the wiki - to force it to generate 'real' certificates instead of 'test' ones?

[JRBATM20192021]

Okay I don't know why I missed this back last month oops but oh well!! Okay I did what you said. Shouldn't hurt anything right? I have been getting the email every week about Checking for renewal but then skipping because its not Jan 12th yet. So i think it is working correctly...

Also yes I ran the dehydrated again so it generated the real certificates so all good there!

Thanks

[TerryF]

Also yes I ran the dehydrated again so it generated the real certificates so all good there!
Thanks

Warning Will Robinson, check forum for other threads re dehydrated update and what that can do..do take note..