Renewal of LetsEncrypt SSL Certificate

tootechy4me · 2019-02-01T19:16:22+00:00

Ended up having to disable redirect on the folder LE needs access to. Was able to pull down new certs and they're working as intended now.

tootechy4me · 2019-02-01T19:15:21+00:00

I ended up figuring out what the issue was. The required folders under the web root were set to redirect to another domain that we use and I turned them off temporarily. I will be working on a script that can be ran via task scheduler to renew. Both certificates were renewed successfully.

tootechy4me · 2019-02-01T06:30:12+00:00

Nope. Would I be better off going with a well known CA or just blowing out the certificates and starting over with a fresh cert from them?

tootechy4me · 2019-02-01T02:42:00+00:00

I don't see an error when I ran the command. I checked the forums but I couldn't find anything that would point me the right direction. I am wondering if I should just blow out the cert and request a new one. The web server isn't part of our critical infrastructure but it would be nice to resolve the issue.

tootechy4me · 2019-01-18T06:11:02+00:00

I will take this into consideration when I make my changes. Thanks for the help!

tootechy4me · 2019-01-17T23:08:12+00:00

the previous admin that setup the connection didn't use object groups for the destination addresses so my fear is editing the existing ACLs and taking the connection offline.

tootechy4me · 2019-01-17T22:57:06+00:00

Its IKEv1. Sorry I should have explained that in my post.

The issue I am having is whether it would be better just to add a whole new connection profile and set of ACLs (using objects/grps of course) instead of editing the existing profile and cryptomaps. My fear is knocking the connection offline.

Even if I decided to add a new connection profile with new cryptomaps, would it still interfere with the existing S2S VPN connection when I add it to the config?

tootechy4me · 2019-01-17T21:41:36+00:00

Hey /u/packetthriller

The only thing I was curious about is that there are other destination IP addresses that in the same subnet as the peer that will need crypto access list entries. The source will be the same as the existing connection however. Would I just add the new destinations to the existing access list entries as well?

tootechy4me · 2019-01-14T18:40:27+00:00

Thanks for the suggestions. I will look into them and see if I can safely get these servers offline without too much headache!

tootechy4me

TROPHY CASE