MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Technical Helps => Topic started by: Amney on 2016-07-26, 05:14:48

Title: letsencrypt error
Post by: Amney on 2016-07-26, 05:14:48
Letsencrypt ssl error
not created ssl certificates letsencrypt
log:
Quote
[Tue Jul 26 05:24:56 CEST 2016] Getting webroot for domain='horrors-films.ru'
[Tue Jul 26 05:24:56 CEST 2016] Getting token for domain='horrors-films.ru'
[Tue Jul 26 05:24:59 CEST 2016] new-authz error: {"type":"urn:acme:error:unauthorized","detail":"No registration exists matching provided key","status": 403}
Title: Re: letsencrypt error
Post by: MRatWork on 2016-07-26, 05:30:49
Try using acme.sh for let's encrypt with install with 'sh /script/acme.sh-installer'.
Title: Re: letsencrypt error
Post by: Amney on 2016-07-26, 06:05:39
Try using acme.sh for let's encrypt with install with 'sh /script/acme.sh-installer'.
(http://images.serverfree.ru/2016-07-26_072108.png)
the certificates are still not created
Title: Re: letsencrypt error
Post by: MRatWork on 2016-07-26, 06:28:31
Did you run 'exec bash' (or reboot) after install acme.sh?
Title: Re: letsencrypt error
Post by: Amney on 2016-07-26, 06:34:47
Did you run 'exec bash' (or reboot) after install acme.sh?
Yes,I did.
(http://images.serverfree.ru/2016-07-26_075245.png)
Title: Re: letsencrypt error
Post by: Amney on 2016-07-26, 06:37:33
the same error
Quote
[Tue Jul 26 06:54:55 CEST 2016] new-authz error: {"type":"urn:acme:error:unauthorized","detail":"No registration exists matching provided key","status": 403}
Title: Re: letsencrypt error
Post by: MRatWork on 2016-07-26, 06:54:47
Attach content of acme.sh.log (see to /var/log/acme.sh/acme.sh.log)
Title: Re: letsencrypt error
Post by: Amney on 2016-07-26, 07:02:44
Attach content of acme.sh.log (see to /var/log/acme.sh/acme.sh.log)
see
Title: Re: letsencrypt error
Post by: MRatWork on 2016-07-26, 07:13:16
To successfull:

1. Don't set redirect domain (non-www, www, webmail and cp) like redirect http to https
2. All address must be access successfully for non-www, www, webmail and cp
3. It's must 'A record' or CNAME for non-www, www, webmail and cp
4. All 'NS record' must be response for dns query

Check dns record via intodns.com.
Title: Re: letsencrypt error
Post by: Amney on 2016-09-27, 10:38:36
To successfull:

1. Don't set redirect domain (non-www, www, webmail and cp) like redirect http to https
2. All address must be access successfully for non-www, www, webmail and cp
3. It's must 'A record' or CNAME for non-www, www, webmail and cp
4. All 'NS record' must be response for dns query

Check dns record via intodns.com.
it seems that all requirements are met,but still error create certificate
(http://images.serverfree.ru/2016-09-27_115921.png)
Title: Re: letsencrypt error
Post by: digidata on 2016-09-30, 12:49:20
after domain.com/stats appears as stats.domain.com tryif to create certificate I receive error:

Code: [Select]
Domain: stats.domain.lt
Type:   unauthorized
Detail: Invalid response from http://stats.domain.lt/.well-known/acme-challenge/pfl-GiwEAFcEpryaHh_WAH4-oilr7nwWdsGPRaCd-zA: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>401 Authorization Required</title>
</head><body>
<h1>Auth"

To fix these errors, please make sure that your domain name was entered correctly and the DNS A record(s) for that domain contain(s) the right IP address.

Also it is any auto renew?
Title: Re: letsencrypt error
Post by: MRatWork on 2016-09-30, 13:17:46
Didn't saw message after run 'sh /script/cleanup' related to 'stats'?.
Title: Re: letsencrypt error
Post by: digidata on 2016-09-30, 16:19:05
Didn't saw message after run 'sh /script/cleanup' related to 'stats'?.

this?
Code: [Select]
sh /script/fixdnsaddstatsrecord
tried run several times, same error.


Removed stats.domain.com from adding ssl, and worked...
Title: Re: letsencrypt error
Post by: MRatWork on 2016-09-30, 16:54:22
Didn't saw message after run 'sh /script/cleanup' related to 'stats'?.

this?
Code: [Select]
sh /script/fixdnsaddstatsrecord
tried run several times, same error.


Removed stats.domain.com from adding ssl, and worked...
Yes, don't make subdomain stats because domain always use stats beside webmail and cp.