Let's Encrypt does not auto renew
Summary
I have enabled Let's Encrypt integration on Omnibus installation with GitLab version 11.3.4. And, I also setting auto renew. But it seem not works.
Steps to reproduce
It does not auto/manual renew the Let's Encrypt certificates until I deleted all SSL certifications in /etc/gitlab/ssl folder.
I tried run manual command for renew:
sudo gitlab-ctl renew-le-certs but it not works
After that, I deleted all SSL certifications at /etc/gitlab/ssl and run above command again. It's works!
Results of GitLab environment info
Expand for output related to GitLab environment info
System information System: Current User: git Using RVM: no Ruby Version: 2.4.4p296 Gem Version: 2.7.6 Bundler Version:1.16.2 Rake Version: 12.3.1 Redis Version: 3.2.11 Git Version: 2.18.1 Sidekiq Version:5.1.3 Go Version: unknown
GitLab information Version: 11.3.4 Revision: 30f019d Directory: /opt/gitlab/embedded/service/gitlab-rails DB Adapter: postgresql URL: https://gitlab.xxxxx.com HTTP Clone URL: https://gitlab.xxxxx.com/some-group/some-project.git SSH Clone URL: git@gitlab.xxxxx.com:some-group/some-project.git Using LDAP: no Using Omniauth: yes Omniauth Providers: google_oauth2
GitLab Shell Version: 8.3.3 Repository storage paths:
- default: /mnt/git-data/repositories Hooks: /opt/gitlab/embedded/service/gitlab-shell/hooks Git: /opt/gitlab/embedded/bin/git
Results of GitLab application Check
Expand for output related to the GitLab application check
(For installations with omnibus-gitlab package run and paste the output of:
sudo gitlab-rake gitlab:check SANITIZE=true)(For installations from source run and paste the output of:
sudo -u git -H bundle exec rake gitlab:check RAILS_ENV=production SANITIZE=true)(we will only investigate if the tests are passing)
Possible fixes
(If you can, link to the line of code that might be responsible for the problem)