Back to the letsyncrypt bug... after reading up on how Let's Encrypt works,
I can figure out the following:
(1) at some point, letsyncrypt hit an error that it either reported or didn't know what to do with;
(2) after that, it kept reporting '0' even though it was *not* working (BUG!);
letsyncrypt doesn't re-request a signed-certificate every time you run it. It has built-in expiration for the cert and will do *nothing* if you just run it without any options, until the cert times out or you specify an option to forc
it do something. That's not a "BUG!".
(3) by the time the cert expired, evidence of whatever problem letsyncypt had (assuming it reported it to begin with) was long gone;
Did you check your web server log output like I already suggested? It should explain what's happening when it's requesting the challenge file that letsyncrypt.js creates (but couldn't be retreived by the Let's Encrypt ACME service or whatever it is)?
Back to the letsyncrypt bug... after reading up on how Let's Encrypt works,
I can figure out the following:
(1) at some point, letsyncrypt hit an error that it either reported or didn't know what to do with;
(2) after that, it kept reporting '0' even though it was *not* working (BUG!);
letsyncrypt doesn't re-request a signed-certificate every time you run it. It has built-in expiration for the cert and will do *nothing* if you just run it without any options, until the cert times out or you specify an option to forc
it do something. That's not a "BUG!".
What you are saying here assumes there was a signed cert in place with an expiration. The problem is that there wasn't one because letsyncrypt
at some point failed to get one.
No signed-certificate = no expiration date = "doing *nothing*" = BUG!
It should keep trying to get one until it is successful. If it isn't = BUG!
There is no reason for me to bother with it now. haproxy saved the day and, because it reads the pem files directly instead of requiring them to be converted into some nonsense format (that can only be generated by buggy letsyncrypt), it is easier to use and figure out.
Steven Wright quote #27:
Experience is something you don't get until just after you need it.
See my "long gone" comment above. Whenever letsyncrypt dropped
its deuce, it wasn't initially noticed and whatever logs its oopsie
got written in are no longer here.
only be generated by buggy letsyncrypt), it is easier to use and
figure out.
| Sysop: | Daphantom |
|---|---|
| Location: | Washington, IL. |
| Users: | 5 |
| Nodes: | 4 (0 / 4) |
| Uptime: | 93:01:13 |
| Calls: | 26 |
| Files: | 21,932 |
| D/L today: |
4 files (546K bytes) |
| Messages: | 25,276 |