buildbot-infra SSL cert error (expired) for docs.buildbot.net

Oct 02 '24 07:10 terencehonles

The docs have been down for over a day now.

Oct 02 '24 22:10 oliwhi

Thanks for the report @p12tic will have to figure out why it wedged but restarting the proxy container fixed the problem.

Oct 02 '24 22:10 verm

The certificate has expired again.

Dec 02 '24 00:12 lopsided98

Fixed.

For some reason https://github.com/buildbot/buildbot-infra/blob/e05dfc2312e72d37ebb89396af7d877eb69f8b6d/roles/nginx-proxy-letsencrypt/files/refresh_certs.sh#L6 line is not being executed after cert renewal. Ugh.

Dec 02 '24 00:12 p12tic

I guess there's no errors that nginx-proxy doesn't exist (since exec expects it to exist)?

It doesn't seem like there should be any errors with that script, but is there a reason certbot is run with up instead of run? I'm used to only using up for long running processes, but it does seem like it probably should exit when the certbot container finishes (based on the docs), but I think you could instead have the line be docker-compose run certbot to make it very clear that the command should run and finish.

You can try enabling tracing in bash with set -x to see where the script gets to.

Dec 06 '24 09:12 terencehonles

Certificate needs to be renewed again - docs are down

Apr 01 '25 17:04 oliwhi

Certs are expired again

May 31 '25 16:05 DiJuMx

On what site? for docs I see a not-after of "Mon, 28 Jul 2025 18:29:10 GMT".

May 31 '25 18:05 djmitche

Huh. Seems to be working now.

Both docs and main, same time as this person on IRC yesterday, and immediately before my comment above today.

Definitely weird as I also now see the same expiry, and a not-before of "Tue, 29 Apr 2025 18:29:11 GMT".

May 31 '25 18:05 DiJuMx

It was reported here and I already fixed it: https://github.com/buildbot/buildbot/issues/8465

May 31 '25 20:05 verm