Let's Encrypt does not auto renew

Summary

I have enabled Let's Encrypt integration on Omnibus installation with GitLab version 11.3.4. And, I also setting auto renew. But it seem not works.

Steps to reproduce

It does not auto/manual renew the Let's Encrypt certificates until I deleted all SSL certifications in /etc/gitlab/ssl folder.

I tried run manual command for renew: sudo gitlab-ctl renew-le-certs but it not works

After that, I deleted all SSL certifications at /etc/gitlab/ssl and run above command again. It's works!

Results of GitLab environment info

Expand for output related to GitLab environment info

System information System: Current User: git Using RVM: no Ruby Version: 2.4.4p296 Gem Version: 2.7.6 Bundler Version:1.16.2 Rake Version: 12.3.1 Redis Version: 3.2.11 Git Version: 2.18.1 Sidekiq Version:5.1.3 Go Version: unknown

GitLab information Version: 11.3.4 Revision: 30f019d Directory: /opt/gitlab/embedded/service/gitlab-rails DB Adapter: postgresql URL: https://gitlab.xxxxx.com HTTP Clone URL: https://gitlab.xxxxx.com/some-group/some-project.git SSH Clone URL: git@gitlab.xxxxx.com:some-group/some-project.git Using LDAP: no Using Omniauth: yes Omniauth Providers: google_oauth2

GitLab Shell Version: 8.3.3 Repository storage paths:

  • default: /mnt/git-data/repositories Hooks: /opt/gitlab/embedded/service/gitlab-shell/hooks Git: /opt/gitlab/embedded/bin/git

Results of GitLab application Check

Expand for output related to the GitLab application check

(For installations with omnibus-gitlab package run and paste the output of: sudo gitlab-rake gitlab:check SANITIZE=true)

(For installations from source run and paste the output of: sudo -u git -H bundle exec rake gitlab:check RAILS_ENV=production SANITIZE=true)

(we will only investigate if the tests are passing)

Possible fixes

(If you can, link to the line of code that might be responsible for the problem)