IRC logs for #aegir, 2017-05-01 (GMT)

2017-04-30
2017-05-02
TimeNickMessage
[10:07:10]* realityloop has joined #aegir
[10:07:59]* realityloop has quit (Client Quit)
[10:44:07]* realityloop has joined #aegir
[16:09:22]* bgm has quit (Ping timeout: 264 seconds)
[16:40:32]* realityloop has quit (Remote host closed the connection)
[17:38:33]* realityloop has joined #aegir
[17:39:53]* realityloop has quit (Remote host closed the connection)
[17:42:34]* realityloop has joined #aegir
[17:42:45]* realityloop has quit (Client Quit)
[21:41:35]* bgm has joined #aegir
[21:48:36]* shaneonabike1 has joined #aegir
[22:33:48]* v20th has joined #aegir
[22:41:41]<bgm>hmm, i'm having issues with hosting_https / letsencrypt, who is randomly messing with certs once a day. Can someone remind me where I can find the log for that queue?
[22:42:41]<bgm>or is it a 'verify' task?
[22:47:30]<bgm>ah, yeah, verify.
[22:50:22]<bgm>so I don't know if this will make any sense, but I need to think out loud:
[22:51:35]<bgm>When 'verify' runs, the fullchain-1493407302.pem gets modified and loses the LE chain cert, so the https chain is broken. (Firefox doesn't notice, but wget/curl/icinga do)
[22:52:13]<bgm>(I did a diff of the cert files, which are also in git, so that I can revert quickly when it happens)
[22:53:13]<bgm>Looking at the verify log, I see the dehydrated command which is run, and it says "(Longer than 30 days). Skipping renew!". If I run that command manually, from the command line, the bug does not happen.
[22:55:04]* orangey has quit (Remote host closed the connection)
[23:06:00]* fatguylaughing has joined #aegir
[23:10:43]* shaneonabike1 has quit (Quit: Leaving.)
[23:17:00]<bgm>ah hmm.. so.. I was symlinking things incorrectly, from legacy stuff.
[23:17:28]<bgm>I had a symlink from openssl_chain.crt -> letsencrypt.d/example.org/fullchain.pem
[23:18:10]<bgm>and aegir must have been redeploying a cert somewhere, maybe from config/ssl.d/ ? in any case.. incorrect symlink.
[00:15:16]* v20th has quit (Ping timeout: 245 seconds)
[00:25:17]* Topplestack has joined #aegir
[00:27:38]* v20th has joined #aegir
[00:49:11]* Captain_Hadd0ck has joined #aegir
[00:49:12]* ouelmart has quit (Quit: http://www.kiwiirc.com/ - A hand crafted IRC client)
[01:17:09]* theMusician has joined #aegir
[02:01:35]* anarcat has quit (Quit: leaving)
[02:01:37]* noecc has joined #aegir
[02:37:58]* hefri627 has joined #aegir
[02:37:59]* hefri627 is now known as hefri54
[02:41:11]* colan has quit (*.net *.split)
[02:41:12]* hefring has quit (*.net *.split)
[02:41:12]* viashimo has quit (*.net *.split)
[02:43:02]* hefri54 is now known as hefring
[02:43:42]* colan has joined #aegir
[05:25:49]* noecc has left #aegir ("pax")
[05:53:37]* joestewart has quit (Remote host closed the connection)
[05:54:00]* joestewart_ is now known as joestewart
[07:23:25]* Captain_Hadd0ck has quit (Ping timeout: 260 seconds)
[08:00:08]* theMusician has quit (Ping timeout: 240 seconds)
[08:16:09]* v20th has quit (Quit: Leaving)
[09:20:24]* Topplestack has quit (Quit: My MacBook has gone to sleep. ZZZzzz…)
[09:27:35]* shaneonabike1 has joined #aegir
[09:58:40]* realityloop has joined #aegir