BigBlueButton container does not renew Letsencrypt certificate

Janvanl · 10-06-2021, 08:21 AM

Hi,

we run a dedicated server with NGINX and BigBlueButton in a Dockercontainer.

The Letsencrypt certificate expired and i need to renew it, i ran certbot with --forced-renewal this produces a certificate outside the Dockercontainer.

if I run
docker run --rm --env-file .env bigbluebutton/greenlight:v2 bundle exec rake conf:check

I get:
certificate verify failed (certificate expired)

Does anyone have an idea how to solve this?

Regards,
Jan

shruggy · 10-06-2021, 08:44 AM

Are you running Ubuntu 16.04? See here (in Russian): https://habr.com/ru/post/580092

Janvanl · 10-06-2021, 09:14 AM

Hi, thanks
but i do not speak or read russian. The commands i see do not seem to involve docker.

This is the Letsencrypt problem with the CA Authority that changed, i cold however produce a certificate
but not for the container.

Regards,
Jan

shruggy · 10-06-2021, 09:54 AM

From this SO answer:

Quote:

If your host OS has already preconfigured CA certs correctly, then you can just mount them as a volume to the container:

Code:

docker run \
  -v /etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt \
  ...

Janvanl · 10-06-2021, 10:14 AM

Thanks Shruggy,

i will try this a couple of hours later. I must save a windows-install first.
My first experience with a SSD that has "bad blocks".

Regards,
Jan

Janvanl · 10-06-2021, 04:55 PM

With the following commands BBB is functional again

cd ~/greenlight
docker-compose down
docker pull bigbluebutton/greenlight:v2
docker-compose up -d

Thanks for the support.

Jan