Page MenuHomePhabricator

update cert settings for wikimedia.se
Closed, ResolvedPublic1 Estimated Story Points

Description

SSL certificates wikimedia.se/donera.wikimedia.se/www.wikimedia.se failed to auto-renew recently. Investigate why and fix.

At the same time we should move the drink on from andre to root and change the contact/notification e-mail to drift@

(the server in question is banhof02)

Event Timeline

I've renewed the certs and updated certbot in the process.

Looks like the log file which the crontab piped the outputs to doesn't exist, that might have caused the (non-sudo) cronjob to fail.

Updated the contact email using certbot-auto register --update-registration --email <email>

We just received a 20 days warning to drift@wikimedia.se concerning this. I checked in Firefox and both wikimedia.se and www.wikimedia.se have been renewed until 2019-05-26. I'll check donera.wikimedia.se when I get into the office.

Considering when @Lokal_Profil fixed this, there should have been at least one successful renewal (sometime in December), so this may be a false positive.

I've checked on the server and everything looks to be in order. All three domains should be valid until 2019-05-26.