Let's encrypt fails on local sub-domains

Hey there.

When I try to enable Let's Encrypt for a domain with sub-domains it will fail, because Let's Encrypt validator wont' be able to open acme challenge file for any sub-domain.
Sub-domain rewrite rule:

Code:

     
if ($http_host = "sub.domain.com") {
       rewrite ^(?!/\b(sub|stats|error)\b)/(.*)$ /sub/$2 last;
}

Acme location:

Code:

     

location ~ /\.well-known/acme-challenge/ {
      root /usr/local/ispconfig/interface/acme/;
      index index.html index.htm;
      try_files $uri =404;
}

http://sub.domain.com/.well-known/acme-challenge/test = 404

Please, advice.

Thank's

 

It seems like nginx is trying to load the file
/usr/local/ispconfig/interface/acme/sub/.well-known/acme-challenge/test

Any ideas?

 

can you provide the actual subdomain?

 

http://old.shtest.nl/
http://old.shtest.nl/.well-known/acme-challenge/test = 404

There is a file "test" in /usr/local/ispconfig/interface/acme/.well-known/acme-challenge/

 

I get 403 - forbidden when I try to access http://old.shtest.nl/.well-known/acme-challenge/test

 

Yeah, because I changes try_files $uri =404; to try_files $uri =403; to see if it comes to that block.

location ~ /\.well-known/acme-challenge/ {
root /usr/local/ispconfig/interface/acme/;
index index.html index.htm;
try_files $uri =403;
}

 

@till would you like to help here, please?

 

These one seems to work fine:
rewrite ^(?!/(.well-known|\b(old|stats|error)\b))/(.*)$ /old/$3 last;

 

Hi,
I have a same issue from yesterday.
All my subdomains stopped working and now even my main site shows this error in Firefox:
------------------------
Secure Connection Failed

An error occurred during a connection to www.royalsteel.com. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.
------------------

I tried to remove all the certificates, and recreated them for my website through ISPConfig panel.
Both SSL and Let's Encrypt checkmark stays active and certificates populated in the cert, request and key fileds.
However, the above error persist on my Firefox if I open any subdomain or main website!
here is the address of website: www.royalsteel.com
I have this issue for all my websites. This one is for sample and test but still have no luck to see why it had happened after long time working fine