ispconfig letsencrypt 504 error

Discussion in 'Installation/Configuration' started by Mef-isp, May 19, 2017.

  1. Mef-isp

    Mef-isp New Member

    Hi,
    I have letsencrypt working for other sites, but one does not work.
    I have searched the forum also looked at the common errors but could not find a clue.
    I checked the DNS settings and the website is accessible, I compared the working websites to the one that doesn't. The settings from the working websites and the not working one look the same.
    When I look at the log files I get:

    2017-05-19 13:34:04,362:DEBUG:certbot.main:Root logging level set at 20
    2017-05-19 13:34:04,365:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
    2017-05-19 13:34:04,366:WARNING:certbot.cli:You are running with an old copy of letsencrypt-auto that does not receive updates, and is less reliable than more recent versions. We recommend upgrading to the latest certbot-auto script, or using native OS $
    2017-05-19 13:34:04,367:DEBUG:certbot.cli:Deprecation warning circumstances: /root/.local/share/letsencrypt/bin/letsencrypt / {'LANG': 'en_US.UTF-8', 'SHELL': '/bin/sh', 'SHLVL': '3', 'PWD': '/usr/local/ispconfig/server', 'LOGNAME': 'root', 'HOME': '/ro$
    2017-05-19 13:34:04,367:DEBUG:certbot.main:certbot version: 0.9.3
    2017-05-19 13:34:04,367:DEBUG:certbot.main:Arguments: ['-n', '--text', '--agree-tos', '--expand', '--authenticator', 'webroot', '--server', 'https://acme-v01.api.letsencrypt.org/directory', '--rsa-key-size', '4096', '--email', 'postmaster@haptotherapie-$
    2017-05-19 13:34:04,369:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#nginx,PluginEntryPoint#standalone,PluginEntryPoint#manual,PluginEntryPoint#webroot,PluginEntryPoint#apache,PluginEntryPoint#null)
    2017-05-19 13:34:04,370:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
    2017-05-19 13:34:04,380:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot
    Description: Place files in webroot directory
    Interfaces: IAuthenticator, IPlugin
    Entry point: webroot = certbot.plugins.webroot:Authenticator
    Initialized: <certbot.plugins.webroot.Authenticator object at 0x7f6bbfba7dd0>
    Prep: True
    2017-05-19 13:34:04,382:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0x7f6bbfba7dd0> and installer None
    2017-05-19 13:34:04,807:DEBUG:certbot.main:picked account: <Account(77d27bd6c4ff421515d193ee76e694da)>
    2017-05-19 13:34:04,811:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
    2017-05-19 13:34:04,823:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
    2017-05-19 13:35:05,044:DEBUG:requests.packages.urllib3.connectionpool:"GET /directory HTTP/1.1" 504 176
    2017-05-19 13:35:05,050:DEBUG:root:Received <Response [504]>. Headers: {'Content-Length': '176', 'Expires': 'Fri, 19 May 2017 13:35:05 GMT', 'Server': 'AkamaiGHost', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache$
    2017-05-19 13:35:05,050:DEBUG:acme.client:Received response <Response [504]> (headers: {'Content-Length': '176', 'Expires': 'Fri, 19 May 2017 13:35:05 GMT', 'Server': 'AkamaiGHost', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max$
    2017-05-19 13:35:05,055:DEBUG:certbot.main:Exiting abnormally:
    Traceback (most recent call last):
    File "/root/.local/share/letsencrypt/bin/letsencrypt", line 11, in <module>
    sys.exit(main())
    File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 776, in main
    return config.func(config, plugins)
    File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 558, in obtain_cert
    le_client = _init_le_client(config, auth, installer)
    File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 375, in _init_le_client
    return client.Client(config, acc, authenticator, installer, acme=acme)
    File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/client.py", line 190, in __init__
    acme = acme_from_config_key(config, self.account.key)
    File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/client.py", line 42, in acme_from_config_key
    return acme_client.Client(config.server, key=key, net=net)
    File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/acme/client.py", line 63, in __init__
    self.net.get(directory).json())
    File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/acme/client.py", line 624, in get
    self._send_request('GET', url, **kwargs), content_type=content_type)
    File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/acme/client.py", line 571, in _check_response
    raise errors.ClientError(response)
    ClientError: <Response [504]>
    Does anyone know what is the cause?
    Best Regards,
    Ronald
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    LE has technical problems, see their status report page, current status: 'Partial Service Disruption'.
     
  3. Mef-isp

    Mef-isp New Member

    Hi Till,
    I have corrected a DNS issue with the vps provider. A form did not allow a dot after the their ns server. It has been removed the certificate is isssued and I see both the ssl and Letsencrypt boxes checked.
    The site haptotherapie-echt.nl is not shown with the certificate. I traced it down to a missing vhost 443 section. In other websites it is added, bu no matter what I do it is not added to the vhosts file.
    When I manually remove the vhosts file and dpo SAVE from ispconfig, only the :80 section is added.
    Should I try to remove the website and add a completely new one?
    Regards,
    Ronald
     
  4. Mef-isp

    Mef-isp New Member

    Ok, now I did a Save and surprise the :443 section is added?
    What I did was adding www. in front of the domain to the domain field in the webdomain section.
    Is that supposed to be this way? All other website are without www. in the domain field.
    Best Wishes,
    Ronald
     
    Last edited: May 20, 2017
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    The domain field contains the domain or subdomain that you want to use. Normally, you use just 'domain.tld' there and use auto subdomain www to have the domain and www subdomain pointing to the site.
     

Share This Page