AutoSSL not renewing, having to manually renew every 90 days!

Started by arseiola, October 09, 2019, 12:10:32 PM

Previous topic - Next topic

arseiola

AutoSSL appears to be renewing and I can see it shows 89 days remaining but its not actually working, pages don't load, the SSL test  fails. I am having to manually renew every 90 days! It works when I manually click renew, although in the past I would have to delete the certificates first before renewing. Is it something I am doing / not doing?

ejsolutions

Before you manually renew, do you try restarting the web server? Just a thought - perhaps the auto-renew scripts doesn't do this.

pixelpadre

Quote from: arseiola on October 09, 2019, 12:10:32 PM
AutoSSL appears to be renewing and I can see it shows 89 days remaining but its not actually working, pages don't load, the SSL test  fails. I am having to manually renew every 90 days! It works when I manually click renew, although in the past I would have to delete the certificates first before renewing. Is it something I am doing / not doing?

I had that problem once.  I disabled the firewall and manual renewal worked perfect.  But dont forget to restart the csf

arseiola

I can manually renew without any problem I don't need to restart the web server or turn off the firewall for manual renewal to work.. If I set the auto renewal time to 1 day it will still say 88 days (or whatever it is when I check it  say 84 days) it seems to completely ignore the Auto SSL. I also don't get notification renewal emails from Auto-SSL , (I do get server email like daily firewall flush and roundcube works. I can send and receive mail)

ejsolutions

Quote from: arseiola on October 12, 2019, 12:56:58 AM
.. If I set the auto renewal time to 1 day it will still say 88 days (or whatever it is when I check it  say 84 days) it seems to completely ignore the Auto SSL.
That is by design. AFAIK, Let's Encrypt won't renew valid certs until near the expiry date.

arseiola

How late should i leave it before renewing? is the default 28 days ok or should I say 80 days?