Server: Nextcloud can't be installed: Invalid SSL Certifiacte

[c0ldn3y]

Steps to reproduce

1. download.nextcloud.com/server/installer/setup-nextcloud.php

Expected behaviour

File can be downloaded (download starts)

Actual behaviour

file can't be downloaded because the SSL Certificate expired

[Kugeleis]

seems to be repetition of #10349

[nextcloud-bot]

GitMate.io thinks possibly related issues are https://github.com/nextcloud/server/issues/5587 (MariaDB SSL-Config breaks Nextcloud-Installation), https://github.com/nextcloud/server/issues/8776 (Nextcloud cannot login), https://github.com/nextcloud/server/issues/9509 (Can't connect Nextcloud to MariaDB with SSL), https://github.com/nextcloud/server/issues/1783 (NextCloud website news RSS invalid XML), and https://github.com/nextcloud/server/issues/8513 (Installing NextCloud - Setting up database crashes VM).

[violoncelloCH]

A new (Let's Encrypt) certificate is valid since 12:53:33, so this was probably just a temporary issue.
Could you tell when exactly you tried to access the download server? @c0ldn3y
If this is recurring every three months (as @Kugeleis stated) maybe something could be changed in the server config of the download-server? (Let's Encrypt cronjob?) cc @nextcloud/infrastructure

[c0ldn3y]

I tried access the download server at 08:55 UTC after it failed i havn't checked it for a while and at least at 13:00 UTC it worked again

[MorrisJobke]

A new (Let's Encrypt) certificate is valid since 12:53:33, so this was probably just a temporary issue.
Could you tell when exactly you tried to access the download server? @c0ldn3y
If this is recurring every three months (as @Kugeleis stated) maybe something could be changed in the server config of the download-server? (Let's Encrypt cronjob?) cc @nextcloud/infrastructure

Weird - the let's encrypt auto renewal should happen already 30 days before the cert expires. Let's have a look why it doesn't do it's job.

[Kugeleis]

I tried to start the update minutes before I posted my comment on the issue.

[uusijani]

I made a note about the failure in my kanban (yesterday) at "13:17:10 GMT+0300 (EEST)", so that would have been 10:17:10 UTC.

[d3v3l15h]

SSL certificate expired, again. Update impossible today 19/01/2018.
Could be great to automate your Letsencrypt certificate renewal, no ?

[MorrisJobke]

Could be great to automate your Letsencrypt certificate renewal, no ?

It actually is, but sometimes gets into a state where the cron job finishes fine, but it doesn't reload the web server correctly. We are about to migrate to another server anyways and will completely re-setup that server and hopefully resolve that issue.

[d3v3l15h]

Understood, Thanks for the quick resolution yesterday.