MRatWork Forum by Mustafa Ramadhan
Sawo Project - Kloxo-MR Discussions => Kloxo-MR Technical Helps => Topic started by: LotsOfQ on 2017-12-17, 13:39:18
-
I can't add Let's Encrypt anymore. It was working fine before. All old ones are still working fine but can't add new ones.
Keeps getting this error. "Alert: Create Certificate failed"
Tried:
sh /script/fixssl; sh /script/fixweb; sh /script/restart-web -y
sh /script/fixdns;sh /script/restart-all;
sh /script/fixdnsaddstatsrecord
I'm out of idea. Anyone please help.
-
I've checked log and found this. It might be because I've upgraded Curl to the latest version (curl.x86_64 0:7.57.0-1.0.cf.rhel6).
7] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 77
[Sun Dec 17 04:12:21 PST 2017] Can not connect to https://acme-v01.api.letsencrypt.org/directory to get nonce.
[Sun Dec 17 04:12:21 PST 2017] Can not get domain new authz.
[Sun Dec 17 04:12:21 PST 2017] Please add '--debug' or '--log' to check more details.
[Sun Dec 17 04:12:21 PST 2017] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
Should I downgrade it and if so, how do I downgrade?
-
Solved.
Go to https://curl.haxx.se/docs/caextract.html and download cacert.pem
rename it to ca-bundle.crt
replace /etc/pki/tls/certs/ca-bundle.crt
-
i am having same issues and also applied all above method but still its not working
-
1. Did you updated curl?
2. Make sure that you actually replace ca-bundle.crt
(Delete /etc/pki/tls/certs/ca-bundle.crt and then upload the new ca-bundle.crt)
Then sh /script/restart-all or reboot
The first time I replaced ca-bundle.crt for some reasons it didn't do so. So I would actually opened it up to see what was inside and sure enough it was pretty blank with a few lines of notes.
-
no, I didn't update the curl, please p0rovide me the command.
-
no, I didn't update the curl, please p0rovide me the command.
https://forum.mratwork.com/kloxo-mr-technical-helps/curl-error-60-peer-certificate-cannot-be-authenticated/msg60543/#msg60543
-
Hello,
Are you still getting that issue??
-
I did marked it "Solved" in the title.