certbot-zimbra icon indicating copy to clipboard operation
certbot-zimbra copied to clipboard

Certificates are renewed but Zimbra services aren't restarted

Open swaan opened this issue 7 years ago • 2 comments

Certificates expired so I tried running the script manually which told me that certificates are not close to expiring. So I selected option 1 which prompted Zimbra to reload and correct certificates were loaded. Why didn't it do this automatically, any ideas?

Timer status:

systemctl status renew-letsencrypt
* renew-letsencrypt.service - Renew Let's Encrypt certificates
   Loaded: loaded (/etc/systemd/system/renew-letsencrypt.service; static; vendor
   Active: inactive (dead) since Mon 2018-04-23 05:22:15 EEST; 4h 50min ago
  Process: 1868 ExecStart=/usr/bin/certbot renew --quiet --agree-tos --pre-hook
 Main PID: 1868 (code=exited, status=0/SUCCESS)

Apr 23 05:22:14 z systemd[1]: Starting Renew Let's Encrypt certificates...
Apr 23 05:22:15 z systemd[1]: Started Renew Let's Encrypt certificates.

swaan avatar Apr 23 '18 07:04 swaan

New OS packages renew certs automatically, and won't call the post-hook script.

I need to find something compatible with that. In the meantime I suggested to disable OS certs renewal and add a cron schedule manually

maxxer avatar Apr 23 '18 07:04 maxxer

Thanks for the workaround tip!

swaan avatar Apr 25 '18 06:04 swaan