{"id":725,"date":"2017-02-10T10:00:33","date_gmt":"2017-02-10T10:00:33","guid":{"rendered":"https:\/\/web.apeconsulting.co.uk\/wordpress\/adrian\/?p=725"},"modified":"2017-02-10T10:00:33","modified_gmt":"2017-02-10T10:00:33","slug":"ssl-update","status":"publish","type":"post","link":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/","title":{"rendered":"SSL update"},"content":{"rendered":"

I thought I’d published this blog, but I’d only saved as a draft, so in terms of a timeline, I actually wrote this before I moved my blog from web to WordPress<\/a>.  It’s only relevant regarding the FreeBSD 9 EOL, as the problems described below had been learned before creating my WordPress jail, hence the reason it wasn’t mentioned!<\/p>\n

Well, as my SSL certificate from an earlier blog was coming up for expiry later this month I thought I better have a go at setting up certbot on my Nginx-proxy server, so I don’t have to mess around creating a cert manually and copying it across to the server. <\/p>\n

My first issue was installing certbot which should have been as simple as ‘make clean install’ in the appropriate ports directory.  I was quite surprised to find that didn’t work as FreeBSD 9.3 as now reach End Of Life (EOL) and the ports  are no longer supported \ud83d\ude2e<\/p>\n

This could be a major issue for me moving forward, and I might need to take the plunge and upgrade my FreeNAS server to 9.10, but as a workaround, it’s possible to override the warning message with the command<\/p>\n

make ALLOW_UNSUPPORTED_SYSTEM=yes clean install<\/span><\/pre>\n
<\/span>I didn’t remember installing certbot into the Nginx-proxy jail, but I must have at some point as it didn’t like a clean install but was happy after a little further investigation and a ‘make reinstall’ command.<\/p>\n
Creating the new certificate with certbot is very simple <\/p>\n
certbot certonly<\/span><\/pre>\n
You get a basic menu to enter some details (such as the domain) and it creates all the relevant files in the \/usr\/local\/etc\/letsencrypt folder.<\/p>\n
It was then just a case of editing my nginx.conf file, pointing the certificate and key locations to the new files, and finally restarting the Nginx service.<\/p>\n
I also created a cronjob to run the certbot renewal a couple of times a day (as recommended) which will fail for the first few months but should auto-renew the certificate 30 days before expiry.   I’ll know for sure at the end of March if this worked!<\/p>\n
If it does, I’ll probably create Letsencrypt certificates for all the other domains that route through the Nginx-proxy server, and hopefully, it’s something I can just forget about then.<\/p>\n
I’ll let you know in a couple of months…<\/p>\n
UPDATE<\/p>\n
I also added a cert for my new WordPress domain, and while I was at it for my ownCloud one too.  Fingers will be crossed at the beginning April that they all auto renew and I can forget about them for a while.<\/p>\n
FURTHER UPDATE<\/p>\n
Ok, so they didn’t automatically update, and I think I need to tinker with my nginx.conf file so that they will work with that instead of the standalone web server.  When I stopped the nginx service and ran ‘certbot renew’ they were all updated and worked as expected.  So it’s only a 5 minute job to renew them all, but is something I need to remember to do, so will spend a little time understand what I need to change in Nginx so hopefully the Cron job runs them automatically next time, or I might be able to get the cron job to stop and then restart nginx.  <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"
I thought I’d published this blog, but I’d only saved as a draft, so in terms of a timeline, I actually wrote this before I moved my blog from web to WordPress.  It’s only relevant regarding the FreeBSD 9 EOL, as the problems described below had been learned before creating my WordPress jail, hence the reason […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[19,2,9],"tags":[21],"class_list":["post-725","post","type-post","status-publish","format-standard","hentry","category-freenas","category-it","category-server","tag-spellchecked"],"yoast_head":"\nSSL update - Adrian's Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSL update - Adrian's Blog\" \/>\n<meta property=\"og:description\" content=\"I thought I’d published this blog, but I’d only saved as a draft, so in terms of a timeline, I actually wrote this before I moved my blog from web to WordPress.  It’s only relevant regarding the FreeBSD 9 EOL, as the problems described below had been learned before creating my WordPress jail, hence the reason […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/\" \/>\n<meta property=\"og:site_name\" content=\"Adrian's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-02-10T10:00:33+00:00\" \/>\n<meta name=\"author\" content=\"Adrian\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adrian\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/ssl-update\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/ssl-update\\\/\"},\"author\":{\"name\":\"Adrian\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#\\\/schema\\\/person\\\/f63f15ff50bb8f956afdd86a816c5d2a\"},\"headline\":\"SSL update\",\"datePublished\":\"2017-02-10T10:00:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/ssl-update\\\/\"},\"wordCount\":563,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#\\\/schema\\\/person\\\/f63f15ff50bb8f956afdd86a816c5d2a\"},\"keywords\":[\"Checked\"],\"articleSection\":[\"FreeNAS\",\"IT\",\"Server\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/ssl-update\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/ssl-update\\\/\",\"url\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/ssl-update\\\/\",\"name\":\"SSL update - Adrian's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#website\"},\"datePublished\":\"2017-02-10T10:00:33+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/ssl-update\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/ssl-update\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/ssl-update\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SSL update\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#website\",\"url\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/\",\"name\":\"Adrian's Blog\",\"description\":\"Ramblings of an IT Geek\",\"publisher\":{\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#\\\/schema\\\/person\\\/f63f15ff50bb8f956afdd86a816c5d2a\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/home.apeconsulting.co.uk\\\/adrian\\\/#\\\/schema\\\/person\\\/f63f15ff50bb8f956afdd86a816c5d2a\",\"name\":\"Adrian\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g\",\"caption\":\"Adrian\"},\"logo\":{\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SSL update - Adrian's Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/","og_locale":"en_GB","og_type":"article","og_title":"SSL update - Adrian's Blog","og_description":"I thought I’d published this blog, but I’d only saved as a draft, so in terms of a timeline, I actually wrote this before I moved my blog from web to WordPress.  It’s only relevant regarding the FreeBSD 9 EOL, as the problems described below had been learned before creating my WordPress jail, hence the reason […]","og_url":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/","og_site_name":"Adrian's Blog","article_published_time":"2017-02-10T10:00:33+00:00","author":"Adrian","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Adrian","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/#article","isPartOf":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/"},"author":{"name":"Adrian","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#\/schema\/person\/f63f15ff50bb8f956afdd86a816c5d2a"},"headline":"SSL update","datePublished":"2017-02-10T10:00:33+00:00","mainEntityOfPage":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/"},"wordCount":563,"commentCount":1,"publisher":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#\/schema\/person\/f63f15ff50bb8f956afdd86a816c5d2a"},"keywords":["Checked"],"articleSection":["FreeNAS","IT","Server"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/","url":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/","name":"SSL update - Adrian's Blog","isPartOf":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#website"},"datePublished":"2017-02-10T10:00:33+00:00","breadcrumb":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/ssl-update\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/home.apeconsulting.co.uk\/adrian\/"},{"@type":"ListItem","position":2,"name":"SSL update"}]},{"@type":"WebSite","@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#website","url":"https:\/\/home.apeconsulting.co.uk\/adrian\/","name":"Adrian's Blog","description":"Ramblings of an IT Geek","publisher":{"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#\/schema\/person\/f63f15ff50bb8f956afdd86a816c5d2a"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/home.apeconsulting.co.uk\/adrian\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":["Person","Organization"],"@id":"https:\/\/home.apeconsulting.co.uk\/adrian\/#\/schema\/person\/f63f15ff50bb8f956afdd86a816c5d2a","name":"Adrian","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g","caption":"Adrian"},"logo":{"@id":"https:\/\/secure.gravatar.com\/avatar\/c2e5d9012573aedee25fd68deb071781d974af50ae74bf73aeb0e70433f7390c?s=96&d=mm&r=g"}}]}},"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p90DI4-bH","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/posts\/725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/comments?post=725"}],"version-history":[{"count":0,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/posts\/725\/revisions"}],"wp:attachment":[{"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/media?parent=725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/categories?post=725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/home.apeconsulting.co.uk\/adrian\/wp-json\/wp\/v2\/tags?post=725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}