[SOLVED] Minor Issue with kloxo-mr and let's encrypt stats.domain.ltd error

[scorpus]

I got some adventures this morning with let's encrypt.

so i come here to share it with you...

For people who try to let let's encrypt working.

 you must remove stats.domain.ltd from alt when you create the certificate... it blocking the process... (for test am using apache php56 and php_fpm_event)

maybe because the redirection from stats.domain.ltd to domain.ltd/stats

whope this will help...

to be sure about the error you can try this command:

bash /root/.acme.sh/acme.sh --issue --webroot /var/run/letsencrypt --domain domain.ltd --domain www.domain.ltd --domain cp.domain.ltd --domain stats.domain.ltd --domain webmail.domain.ltd --keylength 2048 --accountemail scorpus@domain.ltd/root/.acme.sh/acme.sh

(just replace domain.ltd with yours and put your mail)

you will get:

[Mon Jan 30 15:59:30 WET 2017] stats.domain.ltd:Verify error:Invalid response from http://stats.domain.ltd/.well-known/acme-challenge/vil9wvYLoDRi6oEx1oQP_KzUOv06S96w3rX-WV5dv70:
[Mon Jan 30 15:59:30 WET 2017] Please add '--debug' or '--log' to check more details.
[Mon Jan 30 15:59:30 WET 2017] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh

[MRatWork]

Run 'sh /script/fixdnsaddstatsrecord' to add 'A record' for 'stats' for every dns in your server.

In latest Kloxo-MR 7.0, stats address change from 'http://domain.com/stats' to 'http://stats.domain.com'.

[scorpus]

A records already exist

[root@hxxm ~]# sh /script/fixdnsaddstatsrecord
*** Add DNS record for 'stats' key in 'a' type ***
- For 'exxxer.tk' ('esxxxer') at 'localhost'
  * already exists of 'stats' key in 'a' type
- For 'hxxxm.net' ('hxxxxm') at 'localhost'
  * already exists of 'stats' key in 'a' type
- For 'hxxxm.tk' ('haxxam') at 'localhost'
  * already exists of 'stats' key in 'a' type
- For 'upload.hxxxm.net' ('hxxxam') at 'localhost'
  * already exists of 'stats' key in 'a' type
- For 'kixxo.tk' ('kixxo') at 'localhost'
  * already exists of 'stats' key in 'a' type
- For 'mxxxoun.com' ('mxxxoun') at 'localhost'
  * already exists of 'stats' key in 'a' type
- For 'sxxxxepo.tk' ('sxxxrepo') at 'localhost'
  * already exists of 'stats' key in 'a' type

and still get this alert when i try to create cerificat:

Alert: Create Certificate failed [exxfer.tk]

I have to remove stats.esxxxer.tk from "Subject Alternative Name (SAN)" to let process finish.

[MRatWork]

Need propagation time for 'stats' in dns. So, add 'a record' for 'stats' and then wait a minutes (let say 1-2 hours) and then create ssl certificate.

[scorpus]

i will wait to complete domain name propagation and check again with a new domain...

will do test next week to be sure...