And another problem. I was getting SSL errors every now and then, using Firefox. Calling
openssl s_client www.emacswiki.org:443 did in fact say that it was expired:
depth=0 CN = emacswiki.org verify error:num=10:certificate has expired notAfter=Jul 25 03:49:05 2020 GMT
But my ACME client disagreed:
Processing emacswiki.org with alternative names: www.emacswiki.org + Hook: Nothing to do... + Checking domain name(s) of existing cert... unchanged. + Checking expire date of existing cert... + Valid till Sep 26 03:48:59 2020 GMT (Longer than 30 days). Skipping renew! + Hook: Nothing to do...
Then I remembered… Restarting Apache fixed the issue.
I still don’t get it. I do a
service apache2 reload when a new cert is deployed. But somehow that doesn’t work. I’ll switch to a restart. Hopefully that does it.
Anyway, I’m sorry if this caused you any issues.