exxos's Atari, Amiga & retro forum

Sorry for the downtime folks. Someone forget to renew the certs again.. took some doing away from home.. feking server security and all that! :lol: :roll: :chairsmack:

Glad you got there in the end :)

My server certs failed to auto-update about a week ago. acme.sh's cron job was recorded that the certs were out of date but then stupidly wouldn't update them without adding a '--force' on the command line. What's the point of an automatic cron based update script if it doesn't bother updating? Grrrrr! :-)

Rinse and repeat...

Yet again the certs failed to update automatically. I really don't know what is going on with the bloody thing. Maybe I need to do a ritual sacrifice of a magical unicorn or something in order for it to actually work.

It is pretty odd because the backup script is functioning fine. So I will change something again later on and do some better logging for it.

Thanks for playing Atari today :lol: :hide: :foldarms:

It's not that you have to restart/reload your web server to read the updated certs, is it?

I don't think it's normally needed with Apache, but I've an IMAP server that you have to do that with.

BW

Yup, couldn't connect for a while.

Badwolf wrote: 24 Nov 2022 11:08 It's not that you have to restart/reload your web server to read the updated certs, is it?

I don't think it's normally needed with Apache, but I've an IMAP server that you have to do that with.

It does need apache reloading the configuration I think. But that should be done within getssl config.

The underlying problem was the certificate expired and the certs could not update exxoshost because it is a permanent redirect to exxosforum.. So the certificates expire and then exxoshost becomes inaccessible, which then seems to wipe out the entire update process. If the certificate had not had by then it would not ordinarily be a problem anyway.

In case anyone is wondering, exxoshost itself should not have affected the other domains but it did this time around. Because I did not realise when I set up the certificate stuff that I could bundle multiple domains into one cert kind of thing. So all the certificates were done previously individually.. If that was the case then exxoshost not updating would not have stopped the forum from working ( assuming people are accessing it on exxosforum domain). But in order to save myself some headaches and faffing about, everything was integrated into one single certificate. Which now I know if one thing does not work, it wipes out the entire lot :roll:

As the backup jobs are done through a script, I will move the update certs into a script and see what happens. It is possible there is some odd path problems running from cron or something. Also get some proper logging on it this time.