letsencrypt doesnt validate

Discussion in 'Installation/Configuration' started by durchd8.de, May 31, 2017.

  1. durchd8.de

    durchd8.de Member

    ispconfig: current stable (3.1....)
    CENTOS 7, nginx 1.6.3
    domain: http://des9.de

    Installed letsencrypt and apparently ispconfig handles the letsencrypt access fine. Yet letsencrypt floods my log due to being unable to webrrot authenticate. Log file:
    http://des9.de/.well-known/acme-challenge/des9.de

    Any help appreciated...

    TIA
     
  2. sjau

    sjau Local Meanie Moderator

    Please provide according log excerpt.
     
  3. durchd8.de

    durchd8.de Member

    The log excerpt was the lower link: http://des9.de/.well-known/acme-challenge/des9.de

    Current status:
    1. One isue was apparently the non-working IPV6 config, which I now fixed.
    2. By now (after 1.) letsencrypt apparently is no longer started by ispconfig ....

    I dont get it...
     
  4. sjau

    sjau Local Meanie Moderator

    sorry, didn't see the link.
     
  5. durchd8.de

    durchd8.de Member

    So far what I did:
    1. updated the system in general
    2. cleared ssl fields in ispconfig

    Somehow I dont see any more letsencrypt log entries - yet it seems to be active in the background (sending me E-Mails). The error according the E-Mails:
    31.05.2017-14:20 - WARNING - Could not verify domain des9.de, so excluding it from letsencrypt request.
     
  6. durchd8.de

    durchd8.de Member

    Updated the log at http://des9.de/.well-known/acme-challenge/des9.de after rerunning certbot-auto.

    Logging still not available (as far as I can see) - yet letsencrypt seems to work, but witht eh error (from e-mail):
    31.05.2017-14:40 - WARNING - Could not verify domain des9.de, so excluding it from letsencrypt request.
     
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    This means that ispconfig was not able to verify the domain name. You can test it like this on the shell of your server:

    wget http://des9.de

    if you are not able to downloaf the index page of the web with wget, then ispconfig can not verify that the domain points to the right server as well.
     
  8. durchd8.de

    durchd8.de Member

    http://des9.de/.well-known/acme-challenge/index.html
    works - copied the wget to above link
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    Strange. Do you have url fopen disabled in cli php.ini?
     
  10. durchd8.de

    durchd8.de Member

    First of all thank you for dropping by.

    You were right: the index.html came from the server itself. I reconfigured and now both files des9.de/ and index.htm are indetical.
    Still the same error...
     
  11. durchd8.de

    durchd8.de Member

    Turns out the ipv6 configuration with nginx is borked (binding to interfaces). Of course this became obvious with ipv6 turned on also. I will solve this first and if needed start another thread.
     
  12. durchd8.de

    durchd8.de Member

    @till: any hint on why logging of certbot to /var/log/letsencrypt/letsencrypt.log stopped? Or where the logging is cofnigured? ispconfig doesnt log either it seems.
     
  13. till

    till Super Moderator Staff Member ISPConfig Developer

    I don't know how LE does its's logging in detail, did not had that issue yet.
     

Share This Page