[SOLVED] Certificate is not renewed

[Tealk]

Hello,

I do not really understand why the certificate does not renew.

Loading ACME account details
Placing ACME order
Order URL: https://acme-v02.api.letsencrypt.org/acme/order/97691557/7595790935

Getting authorization details from 'https://acme-v02.api.letsencrypt.org/acme/authz-v3/10451842283'
The validation for DOMAIN is pending!
Setting up webserver
Triggering validation
Sleeping for 5 seconds
Status is still 'pending', trying again in 10 seconds
Status is 'valid', domain 'DOMAIN' OK!

All domains validated!

Creating CSR
Checking order status
Order is ready, finalizing order
valid!

Downloading certificate
Setting pveproxy certificate and key
Restarting pveproxy
TASK OK

 

[Tealk]

No one has an idea why the certificate is not renewed although no error is displayed?

 

[dcsapak]

can you post the output of

pvenode cert info
pvenode acme cert renew

 

[Tealk]

Hi @dcsapak ,

I was able to fix the error yesterday, after I restarted the nginx server the new certificate was accepted.

 

[dcsapak]

ok, so you had an nginx proxy in between? that would have cleared that up

 

[Tealk]

Yes, sorry didn't think to mention that.
I'm just surprised that the proxy has made problems.

 

[dcsapak]

well on acme request we restart/reload the necessary daemons so that they can reread the certificate
but nginx does not know that and will serve the old certificates until you tell it to reload since nginx is not a part of pve

 

[Tealk]

Would be nice to have an option for this, because SSL is already standard these days.