acme-renew.ssh in Vicibox 11 doesn't renew.

[newbie]

Hi,

Just got a weird issue with acme-renew.sh, it doesn't renew or should this renew on the date of expiry?:

Code: Select all

/usr/share/vicibox-ssl/acme-renew.sh
===== ViciBox Acme SSL Renewal Wrapper =====
- Starting at Mon Sep 30 13:41:49 EDT 2024
- Disabling Firewall
- Running acme.sh...
- Enabling Firewall
- Restart apache if running
- Finished at Mon Sep 30 13:41:53 EDT 2024

Code: Select all

openssl x509 -dates -noout -in /root/.acme.sh//sub.example.com/sub.example.com.cer
notBefore=Jul  7 03:00:13 2024 GMT
notAfter=Oct  5 03:00:12 2024 GMT

[williamconley]

letsencrypt /certbot allows renewal at 29 days before expiration. Essentially you can renew every 61 days, but it's valid for 90 days. That is to allow you 29 days to work out any failures before expiration.

Over the years, we've had to set up a separate certbot server to renew client SSL certs on machine that are no longer supported. This allows the Old OS to continue, while renewal is handled on a central server which we keep updated. If this is a Vicibox 11.0.1 install, that should obviously not be necessary.

Check "/var/log/acme-renew.log"

Consider changing VERBOSE=false to TRUE with "-v"