IVS Wiki - Recent changes [en]

Release Notes

IVSWikiBlue — Fri, 24 Jul 2026 20:56:09 GMT

Release Notes - Expanded

IVSWikiBlue — Fri, 24 Jul 2026 20:55:52 GMT

Home

IVSWikiBlue — Fri, 24 Jul 2026 20:55:36 GMT

VALT 6.6.21

IVSWikiBlue — Fri, 24 Jul 2026 20:55:23 GMT

Created page with "July 24th, 2026 '''Technical''' * Fixed issue that set an incorrect set of permissions on Web's log files, causing Wowza to behave as if it was not running"

New page

July 24th, 2026

'''Technical'''
* Fixed issue that set an incorrect set of permissions on Web's log files, causing Wowza to behave as if it was not running

Release Notes - Expanded

IVSWikiBlue — Thu, 23 Jul 2026 21:40:40 GMT

Release Notes

IVSWikiBlue — Thu, 23 Jul 2026 21:40:30 GMT

Home

IVSWikiBlue — Thu, 23 Jul 2026 21:40:12 GMT

VALT 6.6.14

IVSWikiBlue — Thu, 23 Jul 2026 21:08:03 GMT

VALT 6.6.19

IVSWikiBlue — Thu, 23 Jul 2026 21:07:25 GMT

VALT 6.6.20

IVSWikiBlue — Thu, 23 Jul 2026 18:59:51 GMT

Created page with "July 23rd, 2026 '''Application''' * Fixed issue in Observe that caused the buttons above the video panel to disappear '''Technical''' * Fixed issue that caused proxy server..."

New page

July 23rd, 2026

'''Application'''
* Fixed issue in Observe that caused the buttons above the video panel to disappear

'''Technical'''
* Fixed issue that caused proxy server settings to not passthrough into the Wozwa configuration files

VALT 6.6.19

IVSWikiBlue — Thu, 23 Jul 2026 17:52:07 GMT

Release Notes - Expanded

IVSWikiBlue — Thu, 23 Jul 2026 17:51:49 GMT

Release Notes

IVSWikiBlue — Thu, 23 Jul 2026 17:51:43 GMT

Home

IVSWikiBlue — Thu, 23 Jul 2026 17:51:27 GMT

Automatic SSL Certificate Renewal

IVSWikiBlue — Thu, 23 Jul 2026 15:31:37 GMT

VALT 6.6.19

IVSWikiBlue — Thu, 23 Jul 2026 14:26:16 GMT

Created page with "July 23rd, 2026 '''Technical''' * SSL Renewal Watcher updates/fixes ** Fixed issue that cleared out the configuration file values during a VALT update ** Fixed issue that acc..."

New page

July 23rd, 2026

'''Technical'''
* SSL Renewal Watcher updates/fixes
** Fixed issue that cleared out the configuration file values during a VALT update
** Fixed issue that accepted malformed time values in the configuration file
** Fixed issue that caused the SSL Renewal Watcher to always fail because the 'inotify-tools' apt package was not marked as a dependency for the 'ivs-valt' apt package
** Updated to accept two different combination formats of filenames: 'fullchain.pem + privkey.pem' or 'cert.pem + chain.pem + privkey.pem'
** Updated to remove all files in the `/usr/local/valt/ssl/incoming/` directory after a renewal has completed, failed, or past its expiry window
** Updated to instantly update scheduled, weekly, and monthly cronjobs any time the configuration file is modified
** Updated to restart the SSL Renewal Watcher service whenever VALT is installed or updated

@@ Line 4: / Line 4: @@
 <h1>VALT 6</h1>
 {{Section - Expand | collapse = | title = <h2>Version 6.6</h2> | content =
-{{Expand Content - expanded | tabName = 6.6.20 | font-size = 16px | width = 800px | content = {{:VALT 6.6.20}} }}
+{{Expand Content - expanded | tabName = 6.6.21 | font-size = 16px | width = 800px | content = {{:VALT 6.6.21}} }}
 {{Expand Content | tabName = 6.6.19 | font-size = 16px | width = 800px | content = {{:VALT 6.6.19}} }}
 {{Expand Content | tabName = 6.6.18 | font-size = 16px | width = 800px | content = {{:VALT 6.6.18}} }}

@@ Line 2: / Line 2: @@
 =VALT=
 {{Section - Expand | collapse = | title = <h2>Version 6.6</h2> | content =
 {{Expand Content - expanded | tabName = 6.6.20 | font-size = 16px | width = 800px | content = {{:VALT 6.6.20}} }}
 {{Expand Content - expanded | tabName = 6.6.19 | font-size = 16px | width = 800px | content = {{:VALT 6.6.19}} }}

@@ Line 6: / Line 6: @@
 {{Try it out - color | text = Subscribe | color = #008aab | link = https://info.ipivs.com/subscribe-to-ivs-newsletter}}
 {{hr}}
-*The current version of VALT is <span style="font-size:20px"><b>[[VALT 6.6.20 | 6.6.20]]</b></span>.
+*The current version of VALT is <span style="font-size:20px"><b>[[VALT 6.6.21 | 6.6.21]]</b></span>.
 *:To learn more, please check out our [[Release Notes]].
 }}

@@ Line 2: / Line 2: @@
 =VALT=
 {{Section - Expand | collapse = | title = <h2>Version 6.6</h2> | content =
 {{Expand Content - expanded | tabName = 6.6.19 | font-size = 16px | width = 800px | content = {{:VALT 6.6.19}} }}
 {{Expand Content - expanded | tabName = 6.6.18 | font-size = 16px | width = 800px | content = {{:VALT 6.6.18}} }}

@@ Line 4: / Line 4: @@
 <h1>VALT 6</h1>
 {{Section - Expand | collapse = | title = <h2>Version 6.6</h2> | content =
-{{Expand Content - expanded | tabName = 6.6.19 | font-size = 16px | width = 800px | content = {{:VALT 6.6.19}} }}
+{{Expand Content - expanded | tabName = 6.6.20 | font-size = 16px | width = 800px | content = {{:VALT 6.6.20}} }}
 {{Expand Content | tabName = 6.6.18 | font-size = 16px | width = 800px | content = {{:VALT 6.6.18}} }}
 {{Expand Content | tabName = 6.6.17 | font-size = 16px | width = 800px | content = {{:VALT 6.6.17}} }}

@@ Line 2: / Line 2: @@
 '''Technical'''
 * Added new feature: ability to enable/disable the valtuser autologin at the console terminal
 * Fixed issue that did not redirect http requests to the /socket.io path to https
 * Fixed issue that did not serve the full-chain SSL certificate to clients in the browser

@@ Line 2: / Line 2: @@
 '''Technical'''
-* SSL Renewal Watcher updates/fixes
+* SSL Renewal Watcher fixes/updates
 ** Fixed issue that cleared out the configuration file values during a VALT update
 ** Fixed issue that accepted malformed time values in the configuration file

@@ Line 1: / Line 1: @@
 {{Article - Manual | content =
 <h1>Summary</h1>
-As of version 6.5, VALT has the capability of automatically applying renewed certificates to help combat the shortened certificate validity periods and for ease of use.
+As of version 6.5, VALT can automatically apply renewed SSL certificates for you.
 <br>
-The <b>SSL Renewal Watcher</b> is a systemd service that, when enabled, watches for changes in the <code><b>/usr/local/valt/ssl/incoming/</b></code> directory. When <code><b>cert.pem</b></code>, <code><b>chain.pem</b></code>, and <code><b>privkey.pem</b></code> are all modified within a 10-minute window, VALT will attempt to replace and install that set of incoming SSL Certificate files over the existing installed set. This operation restarts the Web, Wowza, and Nginx containers so they can utilize the updated files if there are no active recordings.
+When enabled from the VALTMenu, the <b>SSL Renewal Watcher</b> watches the <code><b>/usr/local/valt/ssl/incoming/</b></code> directory. When a complete certificate set appears within a 10-minute window, VALT installs it over the existing set and restarts the Web, Wowza, and Nginx containers so they use the new files (deferred, and noted in the log, if there are active recordings). A complete set is either:
 {{hr}}
@@ Line 12: / Line 16: @@
 {{Manual lvl 2 | title = Order of Operations | content =
 <ol>
-  <li>In the VALTMenu, go to <b>3 SSL Settings</b>, then select <b>4 Enable SSL Renewal Watcher</b>
+  <li>In the VALTMenu, go to <b>3 SSL Settings</b>, then select <b>4 Enable SSL Renewal Watcher</b>.</li>
-  <li>Modify the config file <code><b>/usr/local/valt/conf/ssl_renewer_config</b></code> to the desired settings</li>
+  <li>Set the schedule in <code><b>/usr/local/valt/conf/ssl_renewer_config</b></code> (see <b>Execution Frequency Options</b> below).</li>
- <li>Copy the desired SSL server/leaf certificate into the /incoming directory</li>
+  <li>Copy a complete certificate set (either format above) into the /incoming directory.</li>
 </ol>
 }}
 {{hr}}
@@ Line 42: / Line 34: @@
    <tr>
      <td><code><b>instant</b></code></td>
-     <td>Executes the renewal script <b>immediately.</b></td>
+     <td>Applies the certificates <b>immediately.</b></td>
    </tr>
    <tr>
      <td><code><b>scheduled</b></code></td>
-     <td>Creates a one-time cronjob <b>based on the specified date and time.</b> The cronjob deletes itself after a single execution.</td>
+     <td>Runs <b>once</b> at the specified date and time, then removes itself.</td>
    </tr>
    <tr>
      <td><code><b>weekly</b></code></td>
-     <td>Creates a recurring cronjob <b>using a specified day and time of the week.</b></td>
+     <td>Runs <b>every week</b> on the specified day and time.</td>
    </tr>
    <tr>
      <td><code><b>monthly</b></code></td>
-     <td>Creates a recurring cronjob <b>using a specified date and time of the month.</b></td>
+     <td>Runs <b>every month</b> on the specified day and time.</td>
    </tr>
 </table>
 {{hr}}
 <h1>Error Checking</h1>
-The SSL Renewal Watcher gets its own log file, located at <code>/usr/local/valt/logs/SSLRenewalWatcher.log</code>. This will include ALL log entries regarding the SSL Renewal Watcher service and the SSL Renewer. Here are just <i>some</i> of the checks it makes.
+All activity is logged to <code>/usr/local/valt/logs/SSLRenewalWatcher.log</code>. Before installing, the watcher confirms:
 <ul>
-  <li>If the /usr/local/valt/ssl/incoming/ directory does not exist, do nothing</li>
+  <li>A complete set was updated within the 10-minute window.</li>
-  <li>If there are no files in the /usr/local/valt/ssl/incoming/ directory, do nothing</li>
+  <li>Each certificate is a valid x509 certificate and the private key is valid (RSA or EC).</li>
-  <li>If any of the three files, 'cert.pem', 'chain.pem', and 'privkey.pem' do not exist in the /usr/local/valt/ssl/incoming/ directory, do nothing</li>
+  <li>The leaf certificate and private key match, the certificate is not expired, and the chain is valid.</li>
-  <li>If the certificate files in the /usr/local/valt/ssl/incoming/ directory are the exact same certificate files as the currently installed certificate files, do nothing</li>
+  <li>The incoming certificates differ from the ones already installed (otherwise it skips; override with <code>SSLRenewer.bash --force</code>).</li>
 </ul>
-}}
+Any files that are not part of a valid set are logged and ignored.
 {{Top of Page}}
 }}