Top Menu

Jump to content
Home
    Modules
      • Projects
      • Activity
      • Work packages
      • Gantt charts
      • Calendars
      • Team planners
      • Boards
      • News
    • Getting started
    • Introduction video
      Welcome to OpenProject Community
      Get a quick overview of project management and team collaboration with OpenProject. You can restart this video from the help menu.
    • Help and support
    • Upgrade to Enterprise edition
    • User guides
    • Videos
    • Shortcuts
    • Community forum
    • Enterprise support
    • Additional resources
    • Data privacy and security policy
    • Digital accessibility (DE)
    • OpenProject website
    • Security alerts / Newsletter
    • OpenProject blog
    • Release notes
    • Report a bug
    • Development roadmap
    • Add and edit translations
    • API documentation
  • Sign in
      Forgot your password?

      or sign in with your existing account

      OpenProject ID Google

Side Menu

  • Overview
  • Activity
    Activity
  • Roadmap
  • Work packages
    Work packages
  • Gantt charts
    Gantt charts
  • Calendars
    Calendars
  • Team planners
    Team planners
  • Boards
    Boards
  • News
  • Forums

Content

Support Installation & Updates
  1. OpenProject
  2. Forums
  3. Support Installation & Updates
  4. [RESOLVED] Certbot-auto no longer supported? How to fix?

[RESOLVED] Certbot-auto no longer supported? How to fix?

Added by Charles Marcus over 4 years ago

Hello,

I'm using Openproject 10 on Debian Buster, and had certbot-auto running in a cronjob. I just got word that the LetsEncrypt cert was not working, and upon investigation, discovered that the certbot-auto script is no longer supported.

It appears that the new recommended way is something called plain 'certbot'.

Are there instructions for switching to whatever is now the recommended/supported way to do this for OpenProject?


Replies (8)

RE: Certbot-auto no longer supported? How to fix? - Added by Charles Marcus over 4 years ago

Would appreciate a response here...

RE: Certbot-auto no longer supported? How to fix? - Added by Charles Marcus over 4 years ago

So... is OpenProject dying/dead? This forum sure seems to be...

:(

Our OP instance is at least working now, I'm afraid of breaking something by trying to switch without doing it the official way...

RE: Certbot-auto no longer supported? How to fix? - Added by Cyril Rohr over 4 years ago

Hi Charles,

Sorry for the delay, OpenProject is not dying at all, but Let's Encrypt evolves :) I've created a PR with an updated documentation to use the newer certbot CLI tool. Would be great if you could have a look at the updated instructions and let me know if they worked for you?

https://github.com/opf/openproject/pull/9056 

Thanks!

RE: Certbot-auto no longer supported? How to fix? - Added by Charles Marcus over 4 years ago

Hi Cyril,

Thanks for getting this fixed, and those instructions look fine for a new installation... ;)

But, I'm concerned about the switch from certbot-auto to just installing cerbot using snaps.

So - are you saying that the way documented there at Step 4:

*********************

"4. Remove certbot-auto and any Certbot OS packages

If you have any Certbot packages installed using an OS package manager like apt, dnf, or yum, you should remove them before installing the Certbot snap to ensure that when you run the command certbot the snap is used rather than the installation from your OS package manager. The exact command to do this depends on your OS, but common examples are sudo apt-get remove certbot, sudo dnf remove certbot, or sudo yum remove certbot.

If you previously used Certbot through the certbot-auto script, you should also remove its installation by following the instructions here."

**********************

are correct?

Also, from what I see, I won't even have to run openproject reconfigure again, since the filenames and paths are all the same?

Or do I still need to do that and hit Enter then choose Yes for SSL again?

Thanks again for your help!

RE: Certbot-auto no longer supported? How to fix? - Added by Cyril Rohr over 4 years ago

Yes those instructions are correct. This will simply uninstall the old CLI, keeping your current certificates in place. Then as you mention, running the new CLI will simply overwrite your existing certificates with the same name, and as such you wouldn't need to reconfigure OpenProject itself.

RE: Certbot-auto no longer supported? How to fix? - Added by Charles Marcus over 4 years ago

Thanks for confirming!

I'll post a follow-up after I do this tomorrow morning (prefer not to do things like this during office hours)...

RE: Certbot-auto no longer supported? How to fix? - Added by Charles Marcus over 4 years ago

Hi Cyril -

Instructions worked perfectly, we're back up and running using snapd+certbot.

Thanks very much!

Charles

RE: Certbot-auto no longer supported? How to fix? - Added by Cyril Rohr over 4 years ago

Great to hear!

Cyril

  • (1 - 8/8)
Loading...