Gitlab CE fails Automatic Let’s Encrypt Renewal

How to Use GitLab
1

Problem to solve

I can’t get gitlab CE to automatically renew Lets Encrypt’s certificates. I can manually update them. Currently getting error when I try to visit site “net::ERR_CERT_DATE_INVALID”

Versions

root@gitlab:~# gitlab-rake gitlab:env:info

System information
System: Debian 12
Current User: git
Using RVM: no
Ruby Version: 3.1.5p253
Gem Version: 3.5.17
Bundler Version:2.5.11
Rake Version: 13.0.6
Redis Version: 7.0.15
Sidekiq Version:7.2.4
Go Version: unknown

GitLab information
Version: 17.4.1
Revision: f84ae5260f4
Directory: /opt/gitlab/embedded/service/gitlab-rails
DB Adapter: PostgreSQL
DB Version: 14.11
URL: https://sample.com
HTTP Clone URL: https://sample.com/some-group/some-project.git
SSH Clone URL: git@sample.com:some-group/some-project.git
Using LDAP: no
Using Omniauth: yes
Omniauth Providers:

GitLab Shell
Version: 14.39.0
Repository storages:

  • default: unix:/var/opt/gitlab/gitaly/gitaly.socket
    GitLab Shell path: /opt/gitlab/embedded/service/gitlab-shell

Gitaly

  • default Address: unix:/var/opt/gitlab/gitaly/gitaly.socket
  • default Version: 17.4.1
  • default Git Version: 2.46.0

Current Settings

letsencrypt[‘enable’] = true
letsencrypt[‘contact_emails’] = [‘admin@sample.com’]
letsencrypt[‘auto_renew’] = true
external_url = ‘https://sample.com’

I have run gitlab-ctl reconfigure and restart the server

I would appreciate any help you can provide.

2

Try to access http://sample.com:80. You must get some response. If not (e.g., port 80 is blocked), Let’s Encrypt cannot check that your site exists.

2 Likes