[CollEc] Certificate

Thomas Krichel krichel at openlib.org
Thu Sep 5 15:00:07 UTC 2024


  This should have been CD's issue, but I'm looking at it now

root at helos ~ # grep ssl_ /etc/nginx/sites-available/collec.repec.org
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_certificate /etc/letsencrypt/opt/live/repec.org/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/opt/live/repec.org/privkey.pem; # managed by Certbot

root at helos ~ # ls -l /etc/letsencrypt/opt/live/repec.org/fullchain.pem
lrwxrwxrwx 1 root root 38 Jul 13 02:58 /etc/letsencrypt/opt/live/repec.org/fullchain.pem -> ../../archive/repec.org/fullchain6.pem

root at helos ~ # ls -l /etc/letsencrypt/opt/archive/repec.org/fullchain6.pem 
-rw-r--r-- 1 root root 2.8K Jul 13 02:58 /etc/letsencrypt/opt/archive/repec.org/fullchain6.pem

  This is the same as we use for NEP

root at siche ~ # ls -l /etc/letsencrypt/opt/archive/repec.org/fullchain6.pem 
-rw-r--r-- 1 root root 2.8K Jul 13 02:58 /etc/letsencrypt/opt/archive/repec.org/fullchain6.pem

  So it is referenced in the ngix configuration and it is the
  correct one. 

  But maybe he used a different config. 

-- 
  Written by Thomas Krichel http://openlib.org/home/krichel on his 21643rd day.



More information about the CollEc-run mailing list