Re: [webmin-l] Letsencrypt auto renew error

Solved.

Had a redirect on the non-ssl side redirecting to ssl.  That's a killer 
for the auto-renewal.

mph


On 1/11/2017 6:39 AM, Kimberly wrote:
> Yes, this error also showed up for me on a server running 
> webmin/virtualmin using  Letsencrypt
>
> On 1/10/2017 3:57 PM, Michael Huntley wrote:
>>
>> Found that auto renewal doesn't work. It appears there is an error in 
>> the parsing of the url:
>>
>> An error occurred requesting a new certificate for mail.tcsweb.net from Let's Encrypt : Failed to request certificate : <pre>Parsing account key...
>> Parsing CSR...
>> Registering account...
>> Already registered!
>> Verifying mail.tcsweb.net...
>> Wrote file to/home/tcsweb.net/domains/mail.tcsweb.net/public_html/.well-known/acme-challenge/yjP7rEYPufV7zgnFM9AbhXQ_uy43sp_kAKhjq3dvQjY, but couldn't downloadhttp://mail.tcsweb.net/.well-known/acme-challenge/yjP7rEYPufV7zgnFM9AbhXQ_uy43sp_kAKhjq3dvQjY
>> Traceback (most recent call last):
>>    File "/usr/libexec/webmin/webmin/acme_tiny.py", line 203, in <module>
>>      main(sys.argv[1:])
>>    File "/usr/libexec/webmin/webmin/acme_tiny.py", line 199, in main
>>      signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, log=LOGGER, CA=args.ca)
>>    File "/usr/libexec/webmin/webmin/acme_tiny.py", line 154, in get_crt
>>      domain, challenge_status))
>> ValueError: mail.tcsweb.net challenge did not pass: {u'status': u'invalid', u'validationRecord': [{u'url': u'http://mail.tcsweb.net/.well-known/acme-challenge/yjP7rEYPufV7zgnFM9AbhXQ_uy43sp_kAKhjq3dvQjY', u'hostname': u'mail.tcsweb.net', u'addressUsed': u'50.21.186.20', u'port': u'80', u'addressesResolved': [u'50.21.186.20']}, {u'url': u'https://mail.tcsweb.net.well-known/acme-challenge/yjP7rEYPufV7zgnFM9AbhXQ_uy43sp_kAKhjq3dvQjY', u'hostname': u'mail.tcsweb.net.well-known', u'addressUsed': u'', u'port': u'443', u'addressesResolved': None}], u'keyAuthorization': u'yjP7rEYPufV7zgnFM9AbhXQ_uy43sp_kAKhjq3dvQjY.0wh1YeMHmEKDKfSkm8rtpyxfPt_EGQLezdNZFAetdZ8', u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/KXretau6rn2gQndfH2GoJKdOoxeJEXofwnqDTbKvAgI/490412603', u'token': u'yjP7rEYPufV7zgnFM9AbhXQ_uy43sp_kAKhjq3dvQjY', u'error': {u'status': 400, u'type': u'urn:acme:error:connection', u'detail': u'Could not connect to*mail.tcsweb.net.well-known*'}, u'type': u'http-01'}<-- Problem here. Missing slash prior to ".well-known".
>>
>> Anyone else finding this issue? I didn't find any solutions browsing 
>> through the list archives.... Cheers mph
>>
>>
>> ------------------------------------------------------------------------------
>> Developer Access Program for Intel Xeon Phi Processors
>> Access to Intel Xeon Phi processor-based developer platforms.
>> With one year of Intel Parallel Studio XE.
>> Training and support from Colfax.
>> Order your platform today.http://sdm.link/xeonphi
>>
>>
>> -
>> Forwarded by the Webmin mailing list [email protected]
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>
>
>
> ------------------------------------------------------------------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today. http://sdm.link/xeonphi
>
>
> -
> Forwarded by the Webmin mailing list at [email protected]
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi

-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list