And another problem. I was getting SSL errors every now and then, using Firefox. Calling openssl s_client www.emacswiki.org:443
did in fact say that it was expired:
depth=0 CN = emacswiki.org
verify error:num=10:certificate has expired
notAfter=Jul 25 03:49:05 2020 GMT
But my ACME client disagreed:
Processing emacswiki.org with alternative names: www.emacswiki.org
+ Hook: Nothing to do...
+ Checking domain name(s) of existing cert... unchanged.
+ Checking expire date of existing cert...
+ Valid till Sep 26 03:48:59 2020 GMT (Longer than 30 days). Skipping renew!
+ Hook: Nothing to do...
Uhhhh… What?
Then I remembered… Restarting Apache fixed the issue.
I still don’t get it. I do a service apache2 reload
when a new cert is deployed. But somehow that doesn’t work. I’ll switch to a restart. Hopefully that does it.
Anyway, I’m sorry if this caused you any issues.
– Alex