Back to the letsyncrypt bug... after reading up on how Let's Encrypt works,
I can figure out the following:
(1) at some point, letsyncrypt hit an error that it either reported or didn't know what to do with;
(2) after that, it kept reporting '0' even though it was *not* working (BUG!);
letsyncrypt doesn't re-request a signed-certificate every time you run it. It has built-in expiration for the cert and will do *nothing* if you just run it without any options, until the cert times out or you specify an option to forc
it do something. That's not a "BUG!".
What you are saying here assumes there was a signed cert in place with an expiration. The problem is that there wasn't one because letsyncrypt
at some point failed to get one.
No signed-certificate = no expiration date = "doing *nothing*" = BUG!
It should keep trying to get one until it is successful. If it isn't = BUG!
There is no reason for me to bother with it now. haproxy saved the day and, because it reads the pem files directly instead of requiring them to be converted into some nonsense format (that can only be generated by buggy letsyncrypt), it is easier to use and figure out.
Steven Wright quote #27:
Experience is something you don't get until just after you need it.
See my "long gone" comment above. Whenever letsyncrypt dropped
its deuce, it wasn't initially noticed and whatever logs its oopsie
got written in are no longer here.
only be generated by buggy letsyncrypt), it is easier to use and
figure out.
| Sysop: | Kurisu |
|---|---|
| Location: | Memphis, TN |
| Users: | 7 |
| Nodes: | 16 (0 / 16) |
| Uptime: | 22:49:31 |
| Calls: | 35 |
| Files: | 12 |
| D/L today: |
6 files (8,415K bytes) |
| Messages: | 18,456 |