Force renew certificate about lua-resty-auto-ssl HOT 6 CLOSED

Do you need more information about this issue? Thanks in advance

from lua-resty-auto-ssl.

Sorry for the delay. The process you outlined seems like it should work, so I'm not sure why you're still getting the old certificates. If /etc/resty-auto-ssl/letsencrypt/certs/$domain/privkey.pem is changing contents, then it would seems strange for /etc/resty-auto-ssl/letsencrypt/certs/$domain/cert.pem to remain the same.

I haven't had a chance to try and reproduce this, but as a first step, you might try enable nginx debug logging (error_log /path/to/error.log debug), and try to trigger this forced renewal again. Nginx's debug log will return a ton of output, but if you look for the line starting with auto-ssl: dehydrated output: that should show the dehydrated script's raw output, which might help show what's going on with the renewal.

from lua-resty-auto-ssl.

I finally took some time to try this again with the debug log. There's nothing out of the ordinary in the dehydrated log. The cert files are actually different, but the cert's validity contains the same dates, so I thought they were the same. It looks like Let's Encrypt is returning a new cert with the existing validity dates (when the cert doesn't need to be renewed).

I'm closing this one, thanks

from lua-resty-auto-ssl.

Sorry to post on a closed topic, but if I am not using Redis, would simply deleting the /etc/resty-auto-ssl/letsencrypt/certs/$domain directory work in forcing a new certificate? For testing purposes, I'd like to test the domain but I only have one test domain to work with, so I'd need to delete any previous certificates to try to dynamically create one again.

from lua-resty-auto-ssl.

Sorry to post on a closed topic, but if I am not using Redis, would simply deleting the /etc/resty-auto-ssl/letsencrypt/certs/$domain directory work in forcing a new certificate? For testing purposes, I'd like to test the domain but I only have one test domain to work with, so I'd need to delete any previous certificates to try to dynamically create one again.

You would need to also delete the domain's files in /etc/resty-auto-ssl/storage, then restart your server to purge the cert from its cache.

from lua-resty-auto-ssl.

I've had times where even after restarting the server, the expired cached cert would be served. How can I delete cached certs manually?

from lua-resty-auto-ssl.