(Let’s Encrypt) Just a heads up to the community

[bradbrd992]

…
Here is the thread on letsencrypt

2022.01.25 Issue with TLS-ALPN-01 Validation Method

…

Changes to TLS-ALPN-01 challenge validation

…

Also at this point I would like to point out that it does not seems like the server file at path
/var/lib/docker/volumes/wappler-compose_letsencrypt/_data/acme.json get up updated when you removed TRAEFIK OPTIONS from your production target in Wappler nor does it update the email if you edit emails and then redeploy.

Here are some image to explain.

Here is image from production server

…
Here is the image from Wappler Target

Let me know if I am incorrect about this

[bradbrd992]

I must point out that I haven’t update to the lasted Wappler version 4.5.3 yet Though so maybe someone with latest wappler can validate this for me.

[mebeingken]

Force traefik to reissue certificate

I’m sure many of us have received the email from Let’s encrypt affecting our docker traefik certs… Let's Encrypt revocations affecting your TLS certificates Please immediately renew your TLS certificate(s) that were issued from Let's Encrypt using the TLS-ALPN-01 validation method and the following ACME registration (account) ID(s): Anybody know how to force traefik to revoke and reissue? Killing the service and re-deploying does not do it.

[bradbrd992]

Thanks @mebeingken seems like I got the email and ignored it until a few days ago all hell started going loose on my projects. Good to know that the community was on top this already.

My simple fix for this was turn off traefik in my target then ssh into the server locate path /var/lib/docker/volumes/wappler-compose_letsencrypt/_data/ and then [rm acme.json] to remove the file. I then go back to my production target and turn back traefik on again to reinstalled the certificate.

My question was more gear toward if Wappler actually does edit the acme.json file if one actually edit the email later and hit apply or if it removes the acme.json after you uninstalled the TRAEFIK OPTIONS in the target.

This is what I think could be an easy fix for Wappler going forward if it hasn’t done so before.