Let's Encrypt certificate expiration

Configuration
1

Hello. I just got an email from Let’s Encrypt telling me that the certificate for my cloud URL (https://longcrypticstring.ui.nabu.casa) will expire in 20 days.

I assume that Nabu Casa has an automated process that updates these certs, but want to make user that I don’t need to do anything?

Thanks.

1 Like
2

hah, this is funny timing. I literally just got the same email. I was sorta just planning on waiting it out to see what happens.

3

Same here, any advice?

4

Wait maybe?

5

I was thinking of being a bit more proactive possibly.

6

So it’s 20 days to go and do you really think that the Nabu Casa guys don’t know about it? Particularly given they are EFF partners.

You’re not being proactive, you’re overreacting.

1 Like
7

Incorrect. I am asking a question.

8

The warnings are sent out from Lets Encrypt for a reason. :slight_smile:

I turned on external access when it was released and after testing I disabled it. I assumed that was why the certificate hadn’t renewed. I guess others are actively using it and also got the reminder?

1 Like
9

Thanks for the helpful response, I’ll go and check my setup - it’s been so long since I did so I forgot about external access options.

10

I’ve never used Let’s Encrypt. I used a VPN for remote access before Nabu Casa provided a cloud endpoint.

I plan to do nothing. It’s my forte’. :grinning:

2 Likes
11

Just opened a support ticket with Nabu Casa and will post the results here. Since we pay for this service, an email saying the cert issue is handled would be nice. For my certs I renew when the email notice arrives.

Andy

1 Like
12

Came on here to report same but figured I’d check for others reporting this

Will wait for response.

13

Fast response from Nabu Casa:

Hi Andrew,

No, they are set to auto-renew. We are looking in to the emails being sent to some users from LetsEncrypt.

Some useful info for you: you can force new certificates by removing the .cloud directory where the certs are stored. After a restart of home assistant and signing in to cloud, new certs will be pulled down. This takes a minute or two and isn’t something you want to do repeatedly, since LE has a limit on how many requests for new certs you can make in one day (5 times). When that limit is reached there’s a waiting period that kicks in for up to a week.

Regards,

Ashton

4 Likes
14

I removed the .cloud directory and restarted HA and logged back into cloud. I see the /.cloud PEM files were recreated but my cert still shows that it will expire in 19 days.

15

Covered here: FAQ

Specifically:

I received an email from Let’s Encrypt. Do I need to renew my own certificates?

You do not need to do anything. The certificates for your instance will renew automatically as long as your subscription is active