The certificate service creates a self-signed certificate for Nexus. This needs to be renewed every quarter. Currently, it expired on March 9th, so the next expiry will be June 12th (assuming I fix it today).
The only easy way I know to fix it is to destroy/re-deploy both Nexus and the certificate service. That may be overkill, since the certificate service is supposed to be able to renew the certificate (Actions -> Renew), but it can't in our case because of something related to the network, the storage account seems not to be publicly visible. See microsoft#4166 for the discussion.
Follow-up: The stwebsdebeta account is now publicly accessible, and the Renew action works, however that doesn't seem to be enough to solve the problem. Disabling/re-enabling Nexus doesn't fix it either, so it looks like a full delete/re-deploy of Nexus is needed, even if the certificate service is able to update the certificate on the fly.
The certificate service creates a self-signed certificate for Nexus. This needs to be renewed every quarter. Currently, it expired on March 9th, so the next expiry will be June 12th (assuming I fix it today).
The only easy way I know to fix it is to destroy/re-deploy both Nexus and the certificate service. That may be overkill, since the certificate service is supposed to be able to renew the certificate (
Actions->Renew), but it can't in our case because of something related to the network, the storage account seems not to be publicly visible. See microsoft#4166 for the discussion.Follow-up: The
stwebsdebetaaccount is now publicly accessible, and theRenewaction works, however that doesn't seem to be enough to solve the problem. Disabling/re-enabling Nexus doesn't fix it either, so it looks like a full delete/re-deploy of Nexus is needed, even if the certificate service is able to update the certificate on the fly.