addons icon indicating copy to clipboard operation
addons copied to clipboard

let's encrypt checks expiration date of first name only?

Open jhhbe opened this issue 1 year ago • 0 comments

Describe the issue you are experiencing

I'm getting mails of let's encrypt on expiring certificates, the add-on runs every day but I get:

[08:00:07] INFO: Existing certificate using 'ecdsa' key type.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Certificate not yet due for renewal

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Certificate not yet due for renewal; no action taken.

when I change the configuration and I put one of the expiring names first in the list then I get:

[13:02:38] INFO: Detecting existing certificate type for _my.host_.duckdns.org
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for _my.host_.duckdns.org and 11 more domains

Successfully received certificate.
Certificate is saved at: /data/letsencrypt/live/

So, it seems it is only checking for expiration of the first one in the list. Workaround is easy: change order in configuration, does not happen too often probably only when I add a new host at position 1 in the list.

What type of installation are you running?

Home Assistant OS

Which operating system are you running on?

Home Assistant Operating System

Which add-on are you reporting an issue with?

Let's Encrypt

What is the version of the add-on?

Current version: 5.0.22

Steps to reproduce the issue

if you add a new host at item 1 the addon will request a new certificate however, not all get the same expiration date I believe then I think it only checks the first one to renew so if older are lower in the list they may expire while no renewal is requested

System Health information

clean

Anything in the Supervisor logs that might be useful for us?

n/a

Anything in the add-on logs that might be useful for us?

No response

Additional information

No response

jhhbe avatar Jun 27 '24 11:06 jhhbe