problem with renew let's encrypt SSL certificates

241 views
Skip to first unread message

Rezan Rasoul

unread,
Aug 31, 2021, 2:54:03 AM8/31/21
to bigbluebutton-greenlight

Hello,
I have a problem with renew the certificates for my website with BBB and greenlight

my certificate will be end at 24-09-2021, and I put this code
30 2 * * 1 /usr/bin/certbot renew >> /var/log/le-renew.log
35 2 * * 1 /bin/systemctl reload nginx
inside crontab -e like the documentation but its not renew the  certificate

What can i do for renew the the certificate?
Expiry Date: 2021-09-24 17:27:41+00:00 (VALID: 24 days)

Ali Alhaidary

unread,
Aug 31, 2021, 3:03:14 AM8/31/21
to bigbluebutto...@googlegroups.com

Why would you need to renew? you still have 24 days to go.

Ali

--
You received this message because you are subscribed to the Google Groups "bigbluebutton-greenlight" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-gree...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-greenlight/3e8863c4-aebc-4a6a-892a-d91f41c43377n%40googlegroups.com.

Rezan Rasoul

unread,
Aug 31, 2021, 3:17:31 AM8/31/21
to bigbluebutton-greenlight
it should renew before a 30 days automatically by the code
30 2 * * 1 /usr/bin/certbot renew >> /var/log/le-renew.log
35 2 * * 1 /bin/systemctl reload nginx

Ali Alhaidary

unread,
Aug 31, 2021, 3:26:45 AM8/31/21
to bigbluebutto...@googlegroups.com

No, unless it is due to renew, it will not.

Ali

Rezan Rasoul

unread,
Sep 2, 2021, 2:43:37 AM9/2/21
to bigbluebutton-greenlight

The Let’s Encrypte certificates are good for 90 days and can be automatically renewed. To automatically request a renewal once a week, edit the crontab file for root.

$ sudo crontab -e

And add the following two lines at the bottom:

30 2 * * 1 /usr/bin/certbot renew >> /var/log/le-renew.log
35 2 * * 1 /bin/systemctl reload nginx

These two directives will execute the certbot renew command every Monday at 2:30 am, and then reload Nginx at 2:35am (so the renewed certificate will be used). The output will be piped to a log file located at /var/log/le-renewal.log, so you can always check it later.

bayden10

unread,
Sep 2, 2021, 5:08:17 PM9/2/21
to bigbluebutton-greenlight
If you wish to renew earlier you can use the renewal parameter.
# renew_before_expiry = 30 days 

change your days here:
/etc/letsencrypt/renewal/my.domain.ca.conf

~b10

Rezan Rasoul

unread,
Sep 3, 2021, 2:52:22 AM9/3/21
to bigbluebutton-greenlight
I tried to force renew but its failed
certbot renew --force-renewal

so there are a problem with setting or some thing else

bayden10

unread,
Sep 3, 2021, 4:30:43 PM9/3/21
to bigbluebutton-greenlight
Did you set the parameter first?

~b10

Reply all
Reply to author
Forward
0 new messages