https://bugs.contribs.org/show_bug.cgi?id=10836

            Bug ID: 10836
           Summary: force migration from acme-v1 to acme-v2
    Classification: Contribs
           Product: SME Contribs
           Version: 9.2
          Hardware: ---
                OS: ---
            Status: CONFIRMED
          Severity: normal
          Priority: P3
         Component: smeserver-letsencrypt
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]
  Target Milestone: ---

# ll /etc/dehydrated/
total 40
drwx------ 4 root root 4096 26 sept.  2017 accounts
drwx------ 3 root root 4096 26 sept.  2017 certs
drwx------ 2 root root 4096 18 févr.  2018 chains
-rw-r--r-- 1 root root  259 26 sept.  2017 config
-rw-r--r-- 1 root root 4372  3 mai    2018 config.rpmnew
-rw-r--r-- 1 root root  632 18 févr.  2018 domains.txt
-rw-r--r-- 1 root root 1442  3 mai    2018 domains.txt.rpmnew
drwxr-xr-x 2 root root 4096  3 mai    2018 hooks_clean_challenge.d
drwxr-xr-x 2 root root 4096 13 janv.  2019 hooks_deploy_cert.d

# config show letsencrypt 
letsencrypt=service
    ACCEPT_TERMS=yes
    configure=none
    [email protected]
    hookScript=disabled
    status=enabled

# dehydrated -c
# INFO: Using main config file /etc/dehydrated/config
Processing DOMAIN.com with alternative names: album.DOMAIN.com 
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Jan 12 00:44:20 2020 GMT (Longer than 30 days). Skipping renew!

# config setprop letsencrypt API 2
# expand-template  /etc/dehydrated/config
# dehydrated -c
# INFO: Using main config file /etc/dehydrated/config
! Reusing account from https://acme-v01.api.letsencrypt.org/directory
Processing DOMAIN.com with alternative names: album.DOMAIN.com
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Jan 12 00:44:20 2020 GMT (Longer than 30 days). Skipping renew!


# dehydrated -c -x
# INFO: Using main config file /etc/dehydrated/config
Processing DOMAIN.com with alternative names: album.DOMAIN.com 
 + Checking domain name(s) of existing cert... unchanged.
 + Checking expire date of existing cert...
 + Valid till Jan 12 00:44:20 2020 GMT (Longer than 30 days). Ignoring because
renew was forced!
 + Signing domains...
 + Generating private key...
 + Generating signing request...
 + Requesting new certificate order from CA...
 + Received 30 authorizations URLs from the CA
...
 + Challenge is valid!
 + Cleaning challenge tokens...
 + Requesting certificate...
 + Checking certificate...
 + Done!
 + Creating fullchain.pem...
Set up modSSL db keys
Signal events
All complete
 + Done!



as a résumé we can reuse the acme-v1 account to migrate to acme-v2

at least with a server where an email was used to register

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
_______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/

Reply via email to