Operations grimoire/Incidents/2017-03-12-SSL: Difference between revisions

From Nasqueron Agora
(Created page with "== Incident timeline == * 2017-02-25 Certificate renewed for www.wolfplex.be * 2017-03-11 Old certificate expired * 2017-03-12 Nginx was restarted at 17:28:44, new certificate...")
 
(No difference)

Latest revision as of 19:11, 12 March 2017

Incident timeline

  • 2017-02-25 Certificate renewed for www.wolfplex.be
  • 2017-03-11 Old certificate expired
  • 2017-03-12 Nginx was restarted at 17:28:44, new certificate was live

Root cause

Nginx server MUST be reloaded after a certificate has been renewed.

Actionables

  • Create a plugin to automate this server restart (like in D743)
  • Provide the restart operation as certbot argument and consider to cron that (T1167)
Retrieved from "https://agora.nasqueron.org/index.php?title=Operations_grimoire/Incidents/2017-03-12-SSL&oldid=710"