acme-challenge
ClosedPublic
Actions

Authored by dereckson on Oct 9 2024, 17:48.

Details

Reviewers

ledesillusionniste

Maniphest Tasks

T2051: Can't renew TLS certificates verified through HTTP on docker engines

Commits

rOPSb99907864885: Allow nginx to read /.well-known/acme-challenge

Summary

Certbot write files in /var/letsencrypt-auto/.well-known/acme-challenge
to allow Let's Encrypt server to verify the certificate request comes
from an authorized source.

Fixes T2051.

Test Plan

echo "It works!" > /var/letsencrypt-auto/.well-known/acme-challenge/qa.txt
Browse https://builds.nasqueron.org/.well-known/acme-challenge/qa.txt

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

selinux-certbot-www

Build Status

Buildable 5567
Build 5849: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Oct 9 2024, 17:48

dereckson created this revision.

Harbormaster completed remote builds in B5567: Diff 9010.Oct 9 2024, 17:49

+has_selinux

Harbormaster completed remote builds in B5568: Diff 9011.Oct 9 2024, 17:59

Complector

$ salt docker-002 state.apply roles/core/certificates/letsencrypt
[…]
          ID: selinux_context_certbot_www
    Function: selinux.fcontext_policy_present
        Name: /var/letsencrypt-auto
      Result: True
     Comment:
     Started: 18:00:54.789434
    Duration: 1865.606 ms
     Changes:
              ----------
              new:
                  ----------
                  /var/letsencrypt-auto:
                      ----------
                      filetype:
                          all files
                      sel_type:
                          httpd_sys_content_t
              old:
                  ----------
----------
          ID: selinux_context_certbot_www_applied
    Function: selinux.fcontext_policy_applied
        Name: /var/letsencrypt-auto
      Result: True
     Comment: SElinux policies are already applied for filespec "/var/letsencrypt-auto"
     Started: 18:00:56.655250
    Duration: 7.813 ms
     Changes:
[…]

Summary for docker-002
-------------
Succeeded: 10 (changed=1)
Failed:     0
-------------
Total states run:     10
Total run time:    2.193 s