What is the Best Way to Renew SSL Cert on BBB 2.0
Tolu Okuboyejo
Tolu Okuboyejo
Fred Dixon
--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-s...@googlegroups.com.
To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.
Tolu Okuboyejo
Chief Technology Officer | ICT University
J G
------------------------------------------------------------------
The Let’s Encrypte certificates are good for 90 days and can be automatically renewed. To automatically request a renewal once a week, edit the crontab file for root.
# sudo crontab -e
And add the following two lines at the bottom:
30 2 * * 1 /usr/bin/letsencrypt renew >> /var/log/le-renew.log
35 2 * * 1 /bin/systemctl reload nginx
These two directives will execute the letsencrypt-auto renew command every Monday at 2:30 am, and then reload Nginx at 2:35am (so the renewed certificate will be used). The output will be piped to a log file located at /var/log/le-renewal.log, so you can always check it later.
----------------------------------------------------------------------
If your certificate expired then first run following two commands as root to fix problem instantly and then add Crontab entries as advised by BBB team above in documentation.
/usr/bin/letsencrypt renew >> /var/log/le-renew.log
/bin/systemctl reload nginxHope it helps someone.
Ivos Riti
sd...@distancelearning.cloud
What does “sudo nginx -t” display, will tell you the exact reason
Regards,
Stephen
--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-s...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/f5e2c64c-643f-45c9-b482-ace13b9e85c1n%40googlegroups.com.
Ivos Riti
Raxit Sheth
Trynginx -t && nginx -s reload
Raxit--
Ivos Riti
nginx: [warn] invalid value "TLSv1.3" in /etc/nginx/sites-enabled/bigbluebutton:20
nginx: configuration file /etc/nginx/nginx.conf test failed
listen [::]:443 ssl http2;
server_name webinar.bonsaiclub.it;
ssl_certificate /etc/letsencrypt/live/webinar.bonsaiclub.it/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/webinar.bonsaiclub.it/privkey.pem;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE$
ssl_dhparam /etc/nginx/ssl/dhp-4096.pem;
i can't understand the error
Attempting to parse the version 1.29.0 renewal configuration file found at /etc/letsencrypt/renewal/webinar.bonsaiclub.it.conf with version 0.31.0 of Certbot. This might not work.
Cert not yet due for renewal
sd...@distancelearning.cloud
It’s telling you the error… line 20 of config file. Remove the TLSv1.3 and see what happens. Looks like old nginx may not support
[warn] invalid value "TLSv1.3" in /etc/nginx/sites-enabled/bigbluebutton:20
Regards,
Stephen
From: bigbluebu...@googlegroups.com <bigbluebu...@googlegroups.com> On Behalf Of Ivos Riti
To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/4bb7622c-b804-460e-82f8-33adf10c3c16n%40googlegroups.com.