Ticket #926 (closed defect: fixed)

Opened 6 weeks ago

Last modified 6 weeks ago

TLS cert for patterns.transitionresearchnetwork.org

Reported by: chris Owned by: chris
Priority: major Milestone:
Component: Wagn Keywords:
Cc: sam Estimated Number of Hours: 0.0
Add Hours to Ticket: 0 Billable?: yes
Total Hours: 0.3

Description

The Gandi cert for ​https://patterns.transitionresearchnetwork.org/ is due to expire today, is the site going to have been mirated off PenguinServer by the end of today or should I get a new cert for the site?

Change History

comment:1 Changed 6 weeks ago by chris

I haven't heard that this is is going to be migrated today so I'll get a new cert for it now.

comment:2 Changed 6 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.3
  • Total Hours changed from 0.0 to 0.3

Getting and installing a Let's Encrypt cert:

sudo -i
wget -O - https://get.acme.sh | sh
source ~/.bashrc
acme.sh --issue -d patterns.transitionresearchnetwork.org -d www.patterns.transitionresearchnetwork.org -d wagn.transitionnetwork.org -d wagn-phusion.penguin.webarch.net -w /web/patterns.transitionresearchnetwork.org/patterns/public
mkdir /etc/ssl/letsencrypt
chmod 700 /etc/ssl/letsencrypt
vi /etc/nginx/sites-available/patterns
acme.sh --installcert -d patterns.transitionresearchnetwork.org --certpath /etc/ssl/letsencrypt/patterns.crt.pem --keypath /etc/ssl/letsencrypt/patterns.key.pem --capath /etc/ssl/letsencrypt/patterns.ca.pem --fullchainpath /etc/ssl/letsencrypt/patterns.chain.pem --reloadcmd 'service nginx restart'

And checking:

That looks good, so closing.

comment:3 Changed 6 weeks ago by chris

  • Status changed from new to closed
  • Resolution set to fixed
Note: See TracTickets for help on using tickets.