Let's Encrypt certificate needs to be renewed
Background
The Let's Encrypt certificate will expire on Dec 26 07:39:46 2018 GMT and must to be renewed before that date.
Task description
The website deployed by this repo supports encrypted communication through HTTPS using a TLS digital certificate provided by Let's Encrypt.
These certificates are valid only for three months, and thus need to be periodically renewed. In order to do so, follow these steps.
-
Untick "Force domains with SSL certificates to use HTTPS" on the page settings. -
Clone and run the certboot tool to generate a new certificate: git clone https://github.com/certbot/certbot cd certbot && ./letsencrypt-auto certonly -a manual -d docs.buildstream.buildWhen the ACME challenge token is displayed, do not press
enteryet. -
Open the ci settings, expand Variables and update the value of the ACME_CHALLENGEvariable with the new token. -
Manually run a pipeline for master to force the website to be redeployed. -
Once the pipeline finishes and thus the website is redeployed, go back to the terminal and press enternow to continue. This will generate newfullchain.pemandprivkey.pemfiles. -
On the domain settings replace Certificate (PEM) with updated fullchain.pemand Key (PEM) with updatedprivkey.pem. -
Tick back "Force domains with SSL certificates to use HTTPS" on the page settings. -
Update the due date for this issue for three months later.
Acceptance Criteria
It is possible to access https://docs.buildstream.build with no warnings displayed concerning the certificate.