| [10:07:10] | * realityloop has joined #aegir |
| [10:07:59] | * realityloop has quit (Client Quit) |
| [10:44:07] | * realityloop has joined #aegir |
| [16:09:22] | * bgm has quit (Ping timeout: 264 seconds) |
| [16:40:32] | * realityloop has quit (Remote host closed the connection) |
| [17:38:33] | * realityloop has joined #aegir |
| [17:39:53] | * realityloop has quit (Remote host closed the connection) |
| [17:42:34] | * realityloop has joined #aegir |
| [17:42:45] | * realityloop has quit (Client Quit) |
| [21:41:35] | * bgm has joined #aegir |
| [21:48:36] | * shaneonabike1 has joined #aegir |
| [22:33:48] | * v20th has joined #aegir |
| [22:41:41] | <bgm> | hmm, i'm having issues with hosting_https / letsencrypt, who is randomly messing with certs once a day. Can someone remind me where I can find the log for that queue? |
| [22:42:41] | <bgm> | or is it a 'verify' task? |
| [22:47:30] | <bgm> | ah, yeah, verify. |
| [22:50:22] | <bgm> | so I don't know if this will make any sense, but I need to think out loud: |
| [22:51:35] | <bgm> | When 'verify' runs, the fullchain-1493407302.pem gets modified and loses the LE chain cert, so the https chain is broken. (Firefox doesn't notice, but wget/curl/icinga do) |
| [22:52:13] | <bgm> | (I did a diff of the cert files, which are also in git, so that I can revert quickly when it happens) |
| [22:53:13] | <bgm> | Looking at the verify log, I see the dehydrated command which is run, and it says "(Longer than 30 days). Skipping renew!". If I run that command manually, from the command line, the bug does not happen. |
| [22:55:04] | * orangey has quit (Remote host closed the connection) |
| [23:06:00] | * fatguylaughing has joined #aegir |
| [23:10:43] | * shaneonabike1 has quit (Quit: Leaving.) |
| [23:17:00] | <bgm> | ah hmm.. so.. I was symlinking things incorrectly, from legacy stuff. |
| [23:17:28] | <bgm> | I had a symlink from openssl_chain.crt -> letsencrypt.d/example.org/fullchain.pem |
| [23:18:10] | <bgm> | and aegir must have been redeploying a cert somewhere, maybe from config/ssl.d/ ? in any case.. incorrect symlink. |
| [00:15:16] | * v20th has quit (Ping timeout: 245 seconds) |
| [00:25:17] | * Topplestack has joined #aegir |
| [00:27:38] | * v20th has joined #aegir |
| [00:49:11] | * Captain_Hadd0ck has joined #aegir |
| [00:49:12] | * ouelmart has quit (Quit: http://www.kiwiirc.com/ - A hand crafted IRC client) |
| [01:17:09] | * theMusician has joined #aegir |
| [02:01:35] | * anarcat has quit (Quit: leaving) |
| [02:01:37] | * noecc has joined #aegir |
| [02:37:58] | * hefri627 has joined #aegir |
| [02:37:59] | * hefri627 is now known as hefri54 |
| [02:41:11] | * colan has quit (*.net *.split) |
| [02:41:12] | * hefring has quit (*.net *.split) |
| [02:41:12] | * viashimo has quit (*.net *.split) |
| [02:43:02] | * hefri54 is now known as hefring |
| [02:43:42] | * colan has joined #aegir |
| [05:25:49] | * noecc has left #aegir ("pax") |
| [05:53:37] | * joestewart has quit (Remote host closed the connection) |
| [05:54:00] | * joestewart_ is now known as joestewart |
| [07:23:25] | * Captain_Hadd0ck has quit (Ping timeout: 260 seconds) |
| [08:00:08] | * theMusician has quit (Ping timeout: 240 seconds) |
| [08:16:09] | * v20th has quit (Quit: Leaving) |
| [09:20:24] | * Topplestack has quit (Quit: My MacBook has gone to sleep. ZZZzzz…) |
| [09:27:35] | * shaneonabike1 has joined #aegir |
| [09:58:40] | * realityloop has joined #aegir |