Let\\’s Encrypt removes support for TLS

Among the many free SSL certificates, many of our netizens choose to use Let’s Encrypt certificates. In many WEB systems and one-click installation scripts, many of them integrate Let’s Encrypt certificates. Although this certificate is free for 90 days, the general script panel comes with automatic renewal, so when we use it, it is not much different from being free forever. However, will we find that since last year, many Let\\'s Encrypt certificates in WEB environments that were originally running well cannot be automatically renewed, so we will use manual renewal or rebuild the site to continue renewing for another three months. .

In fact, part of the reason is due to server problems and problems we have in the panel script, but part of the reason is that our early WEB environment used TLS-SNI-01, and Let\\'s Encrypt had A notice was issued to stop work on February 13, 2019, and the TLS-SNI-01 verification method will not be used. We need to upgrade verification tools in a timely manner.

Original address:

Action is required to prevent your Let's Encrypt certificate renewals from breaking.Your Let's Encrypt client used ACME TLS-SNI-01 domain validation to issue a certificate in the past 60 days.TLS-SNI-01 validation is reaching end-of -life and will stop working on February 13th, 2019.

You need to update your ACME client to use an alternative validation method (HTTP-01, DNS-01 or TLS-ALPN-01) before this date or your certificate renewals will break and existing certificates will start to expire.

What we need to do is check whether the WEB system you are currently using can upgrade the SSL certificate verification script.

For example, we use this method when using LNMP scripts:

wget -O – http://soft.vpser.net/lnmp/ext/fix_renewssl.sh|bash

If we use Oneinstack, use the following method.

./upgrade.sh

Then select 10 and press Enter as shown below to upgrade.

At the same time, if we use the Pagoda panel, be sure to upgrade to the latest version.

So, if we see that our website is using Let\\’s Encrypt SSL certificate and it fails to automatically renew, we need to check whether this is the problem.

Recommended site searches: Telecom IP agent, Wanwang space management, Japanese server free, virtual host application, Western Digital registration, domain name registration website, query whether the domain name is registered, Ministry of Industry and Information Technology domain name registration, mobile server hosting, space rental