Lets Encrypt not auto renewing

J

jamesf

Verified User
Joined
Jun 30, 2019
Messages
114
Hi,

Had a problem with a client today.

Their Lets encrypt SSL didn't automatically renew and we had no notification?

is there a way we can see the log or find out why it didn't renew?

I logged in and renewed it manually, so it would seem there is no issue as such.
 
You may have a look at system.log for any hints, or
grep -i letsencrypt /var/log/directadmin/system.log
 
What is email set to in the USER section. Maintaining SSL is not a admin task the User does this. They should have gotten an email.

DirectAdmin

DirectAdmin Web Control Panel Site-Helper. Helping you get the most out of DirectAdmin and your web site!
www.site-helper.com

Installing a Let's Encrypt Certificate​

Probably easiest way to install secure, free and browsers trusted certificate for your site is Let's Encrpyt certificate, so we strongly recommend to use this method if you don't want to buy certificate from trusted authorities.

Note: You must enable let's encrpyt in DA to use it. If you don't see "Let's Encrpyt" section in SSL certificates menu, ask your admin to enable it. If you are admin, you can enable Let's Encrpyt by following this guide.
To enable Let's Encrypt, choose "Free & automatic certificate from Let's Encrypt" radius.
Enter Common name and E-mail.
Note: do not use "www" or "http(s)://" in common name section.
Choose which Certificate Entries you want to secure. You can select maximum of 20.
Note: Always select yourdomain.com and www.yourdomain.com entries.
Press "Save" button. That's it!

If they were an old Cpanel account you might need to look at this

 
Thanks Brent,

I am pretty sure the client should have an email when it is due for renewal and usually the 'admin' gets a copy?

I know in cPanel the server admin gets notifications of renewals and you get the main admin area where you can see whats coming up for renewal.
 
If I remember correctly, they did change it to admin/reseller but left an option in directadmin.conf so you can enable it for users.
Ah, found it:
Code: 
letsencrypt_renewal_error_to_users=1
put that line in /usr/local/directadmin/conf/directadmin.conf and restart directadmin.

Lots of other options present too, you can find them here:
 
You must log in or register to reply here.
Back
Top