Problem/Motivation

Because of an outage of my datacenter i found out that Aegir includes the SSL vhost template into disabled sites.
This will result in expired certs for disabled sites.

Aegir cannot renew the certs because the disabled template does not include the well-known alias.

Proposed resolution

Either renew certs for disabled sites or disable encryption during the disable task.

Comments

valkum created an issue. See original summary.

helmo’s picture

Status: Active » Needs review

This relates to #2952366: Exclude /.well-known/acme-challenge from "HTTPS Required" from which we can borrow a RewriteCond.

I'll post an updated patch there.

helmo’s picture

Status: Needs review » Needs work

More will be needed ... the query in hosting_letsencrypt_get_site() excludes disabled sites. And manually running a verify task is also blocked in the code somewhere.