Page MenuHomePhabricator

Fix Wikimini Let's Encrypt certificate renewal
Closed, ResolvedPublic

Description

The https://en.wikimini.org/ Let's Encrypt certificate was expired 5 days ago:

$ ssh demo.wikimedia.ch
$ certbot renew --quiet --non-interactive
Attempting to renew cert (en.wikimini.org-0001) from /etc/letsencrypt/renewal/en.wikimini.org-0001.conf produced an unexpected error: Missing command line flag or config entry for this setting:
Input the webroot for en.wikimini.org:. Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/en.wikimini.org-0001/fullchain.pem (failure)

Probably nobody noticed this because the website is usually used in school periods.

I've updated the configuration adding this line:

/etc/letsencrypt/renewal/en.wikimini.org-0001.conf
[[webroot_map]]
en.wikimini.org = /var/www/wikimini.org/www/w

Then renewed:

$ certbot renew --quiet
$ apache2ctl graceful

The new certificate was issued fine. Fixed.

Event Timeline

valerio.bozzolan triaged this task as High priority.
valerio.bozzolan created this task.
valerio.bozzolan updated the task description. (Show Details)