Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-04-19, 17:29:34

Author Topic: Unable to create Let's Encrypt  (Read 12443 times)

0 Members and 1 Guest are viewing this topic.

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Unable to create Let's Encrypt
« on: 2016-05-19, 01:44:29 »
I've upgrade some old server and installation seems to went fine, but when creating new Let's Encrypt it throws an error unable to create certificate... ;(

Logs seems to be old ...

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Unable to create Let's Encrypt
« Reply #1 on: 2016-05-19, 03:12:21 »
In latest update of Kloxo-MR 7, create/add letsencrypt ssl use 'acme.sh' (pure bash code) instead 'letsencrypt-auto' / 'certboot-auto' (pure python code; may trouble in CentOS 5).
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: Unable to create Let's Encrypt
« Reply #2 on: 2016-05-19, 11:53:13 »
I know but it still doesn't work. What else should be done ?

/etc/letsencrypt and /root/.acme weren't created...

I've tried remover but also didn't helped.
« Last Edit: 2016-05-19, 12:36:22 by Spacedust »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Unable to create Let's Encrypt
« Reply #3 on: 2016-05-19, 14:09:17 »
Try 'sh /script/acme.sh-installer' and then try with 'acme.sh --help'.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: Unable to create Let's Encrypt
« Reply #4 on: 2016-05-19, 14:38:39 »
Try 'sh /script/acme.sh-installer' and then try with 'acme.sh --help'.

Just tried:

[root@ali /]# sh /script/acme.sh-installer
[root@ali /]# acme.sh --help
https://github.com/Neilpang/acme.sh
v2.2.4
Usage: acme.sh  command ...[parameters]....
Commands:
  --help, -h               Show this help message.
  --version, -v            Show version info.
  --install                Install acme.sh to your system.
  --uninstall              Uninstall acme.sh, and uninstall the cron job.
  --issue                  Issue a cert.
  --installcert            Install the issued cert to apache/nginx or any other server.
  --renew, -r              Renew a cert.
  --renewAll               Renew all the certs
  --revoke                 Revoke a cert.
  --installcronjob         Install the cron job to renew certs, you don't need to call t                         his. The 'install' command can automatically install the cron job.
  --uninstallcronjob       Uninstall the cron job. The 'uninstall' command can do this a                         utomatically.
  --cron                   Run cron job to renew all the certs.
  --toPkcs                 Export the certificate and key to a pfx file.
  --createAccountKey, -cak Create an account private key, professional use.
  --createDomainKey, -cdk  Create an domain private key, professional use.
  --createCSR, -ccsr       Create CSR , professional use.

Parameters:
  --domain, -d   domain.tld         Specifies a domain, used to issue, renew or revoke e                         tc.
  --force, -f                       Used to force to install or force to renew a cert im                         mediately.
  --staging, --test                 Use staging server, just for test.
  --debug                           Output debug info.

  --webroot, -w  /path/to/webroot   Specifies the web root folder for web root mode.
  --standalone                      Use standalone mode.
  --apache                          Use apache mode.
  --dns [dns_cf|dns_dp|dns_cx|/path/to/api/file]   Use dns mode or dns api.

  --keylength, -k [2048]            Specifies the domain key length: 2048, 3072, 4096, 8                         192 or ec-256, ec-384.
  --accountkeylength, -ak [2048]    Specifies the account key length.

  These parameters are to install the cert to nginx/apache or anyother server after issu                         e/renew a cert:

  --certpath /path/to/real/cert/file  After issue/renew, the cert will be copied to this                          path.
  --keypath /path/to/real/key/file  After issue/renew, the key will be copied to this pa                         th.
  --capath /path/to/real/ca/file    After issue/renew, the intermediate cert will be cop                         ied to this path.
  --fullchainpath /path/to/fullchain/file After issue/renew, the fullchain cert will be                          copied to this path.

  --reloadcmd "service nginx reload" After issue/renew, it's used to reload the server.

  --accountconf                     Specifies a customized account config file.
  --home                            Specifies the home dir for acme.sh .
  --certhome                        Specifies the home dir to save all the certs.
  --useragent                       Specifies the user agent string. it will be saved fo                         r future use too.
  --accountemail                    Specifies the account email for registering, Only va                         lid for the '--install' command.
  --accountkey                      Specifies the account key path, Only valid for the '                         --install' command.
  --days                            Specifies the days to renew the cert when using '--i                         ssue' command. The max value is 80 days.

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: Unable to create Let's Encrypt
« Reply #5 on: 2016-05-19, 14:39:20 »
Creating certificate failed ;(

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: Unable to create Let's Encrypt
« Reply #6 on: 2016-05-19, 23:26:23 »
I've applied all the latest fixes but still the same:

Alert: Create Certificate failed [domain.com]

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Unable to create Let's Encrypt
« Reply #7 on: 2016-05-20, 00:03:02 »
What's report from 'letsencrypt' log?.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: Unable to create Let's Encrypt
« Reply #8 on: 2016-05-20, 12:35:49 »
What's report from 'letsencrypt' log?.

It's blank ;(

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: Unable to create Let's Encrypt
« Reply #9 on: 2016-05-21, 00:24:34 »
I got log:

[Sat May 21 00:38:45 CEST 2016] Standalone mode.
[Sat May 21 00:38:47 CEST 2016] Skip register account key
[Sat May 21 00:38:47 CEST 2016] Creating csr
[Sat May 21 00:38:47 CEST 2016] Multi domain='DNS:www.portaleinternet.pl,DNS:cp.portaleinternet.pl,DNS:webmail.portaleinternet.pl'
[Sat May 21 00:38:47 CEST 2016] Verify each domain
[Sat May 21 00:38:47 CEST 2016] Getting webroot for domain='portaleinternet.pl'
[Sat May 21 00:38:47 CEST 2016] Getting token for domain='portaleinternet.pl'
[Sat May 21 00:38:48 CEST 2016] Error, can not get domain token portaleinternet.pl

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Unable to create Let's Encrypt
« Reply #10 on: 2016-05-21, 00:35:14 »
I got log:

[Sat May 21 00:38:45 CEST 2016] Standalone mode.
[Sat May 21 00:38:47 CEST 2016] Skip register account key
[Sat May 21 00:38:47 CEST 2016] Creating csr
[Sat May 21 00:38:47 CEST 2016] Multi domain='DNS:www.portaleinternet.pl,DNS:cp.portaleinternet.pl,DNS:webmail.portaleinternet.pl'
[Sat May 21 00:38:47 CEST 2016] Verify each domain
[Sat May 21 00:38:47 CEST 2016] Getting webroot for domain='portaleinternet.pl'
[Sat May 21 00:38:47 CEST 2016] Getting token for domain='portaleinternet.pl'
[Sat May 21 00:38:48 CEST 2016] Error, can not get domain token portaleinternet.pl
I got the same issue on this forum's server. But nothing wrong in other servers.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: Unable to create Let's Encrypt
« Reply #11 on: 2016-05-21, 13:24:02 »
I got the same. Please help. DNS is working fine, latest tpls and nothing helps.

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: Unable to create Let's Encrypt
« Reply #12 on: 2016-05-21, 14:10:26 »
It seems to be fixed: https://github.com/Neilpang/acme.sh/issues/191 but doesn't work for me from Kloxo (no logs).

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Unable to create Let's Encrypt
« Reply #13 on: 2016-05-21, 15:52:18 »
In latest update, back to use letsencrypt-auto.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: Unable to create Let's Encrypt
« Reply #14 on: 2016-05-21, 21:45:04 »
I've updated but it didn't helped. No logs and Alert: Create Certificate failed [domain.com] error message.

Running letsencrypt-auto shows this:

Checking for new version...
Requesting root privileges to run certbot...
   /root/.local/share/letsencrypt/bin/letsencrypt
Version: 1.1-20080819
Version: 1.1-20080819

and.... nothing happens - it just 100% CPU usage.
« Last Edit: 2016-05-21, 21:51:53 by Spacedust »

 


Top 10 Social Networking:    Facebook    Twitter    LinkedIn    Pinterest    Google Plus    Tumblr    Instagram    VK    Flickr    Vine
Click Here

Page created in 0.028 seconds with 18 queries.

web stats analysis