Messages

61

Kloxo-MR Bugs and Requests / Re: Unable to verify SSL for subdomain

« on: 2019-05-22, 10:04:10 »

Yes. Main domain worked just fine.

How to try refreshing manually with debug option?

62

Kloxo-MR Bugs and Requests / Nginx not listening via IPv6

« on: 2019-05-21, 19:30:13 »

I use this one for nginxproxy:

nginx -V
nginx version: nginx/1.16.0 (packages.exove.com: SSE2, openssl-1.1.1b, PCRE JIT, TCP Fast Open)
built by gcc 7.3.1 20180303 (Red Hat 7.3.1-5) (GCC)
built with OpenSSL 1.1.1b  26 Feb 2019
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-pcre=../pcre-8.43 --with-pcre-jit --with-pcre-opt=-fPIC --with-openssl=../openssl-1.1.1b --with-libatomic --add-dynamic-module=../incubator-pagespeed-ngx-1.13.35.2-stable --build='packages.exove.com: SSE2, openssl-1.1.1b, PCRE JIT, TCP Fast Open' --with-openssl-opt=no-dtls --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -fPIC -mmmx -msse -msse2 -DTCP_FASTOPEN=23' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -pie'

Maybe you can release latest version 1.17.0?

63

Kloxo-MR Bugs and Requests / Re: Unable to verify SSL for subdomain

« on: 2019-05-21, 19:06:59 »

After disabling IPv6:

[Tue May 21 19:04:57 CEST 2019] Pending
[Tue May 21 19:04:59 CEST 2019] Pending
[Tue May 21 19:05:02 CEST 2019] Pending
[Tue May 21 19:05:04 CEST 2019] Pending
[Tue May 21 19:05:07 CEST 2019] Pending
[Tue May 21 19:05:09 CEST 2019] Pending
[Tue May 21 19:05:12 CEST 2019] Pending
[Tue May 21 19:05:14 CEST 2019] Pending
[Tue May 21 19:05:17 CEST 2019] Pending
[Tue May 21 19:05:20 CEST 2019] pics.domain.com:Verify error:Fetching https://pics.domain.com/.well-known/acme-challenge/pGEVLMGkmxyDcpnQkSbuto5WnAgTbWXRuMH4m2cKDhM: Timeout during connect (likely firewall problem)
[Tue May 21 19:05:20 CEST 2019] Please add '--debug' or '--log' to check more details.
[Tue May 21 19:05:20 CEST 2019] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh

Subdomain is normally reachable via browser.

64

Kloxo-MR Bugs and Requests / Re: Unable to verify SSL for subdomain

« on: 2019-05-21, 18:53:13 »

Still doesn't work:

[Tue May 21 18:51:53 CEST 2019] pics.domain.com:Verify error:Fetching https://pics.domain.com/.well-known/acme-challenge/PzwErsnWR34aNkTGgSEYytoUXqmHUU7DH2oFWUQmQB0: Connection refused
[Tue May 21 18:51:53 CEST 2019] Please add '--debug' or '--log' to check more details.
[Tue May 21 18:51:53 CEST 2019] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh

65

Kloxo-MR Bugs and Requests / Re: Unable to verify SSL for subdomain

« on: 2019-05-18, 13:38:48 »

I tried and it seems I've hitted some limit. I need to retry later.

66

Kloxo-MR Bugs and Requests / Unable to verify SSL for subdomain

« on: 2019-05-18, 12:36:44 »

https://domain.com/.well-known/acme-challenge/HslgN0P7ZqhUrmA3NJKVvv_3D36C3rwvWS2Vk52XyJ8

Simply doesn't see the file inside this directory, while it works properly for main domain.

67

Kloxo-MR Bugs and Requests / Re: Enable TLSv1.3 in nginx/Apache

« on: 2019-05-17, 23:45:00 »

Make sure to check if you latest update for TLS 1.3 does work under CentOS 6.

CentOS 6 is delivered with openssl 1.0.1e which doesn't have TLS 1.3 support.

https://www.cdn77.com/tls-test

68

Kloxo-MR Bugs and Requests / Re: Add PHP 7.2

« on: 2019-05-17, 23:43:00 »

I use single PHP version now.

69

Forum Announcements / Re: He is back!!!!!!!!!!!!!!

« on: 2019-05-17, 23:39:17 »

First updates are rolling!

kloxomr7-7.0.0.c-2019051601.mr.noarch

70

Kloxo-MR Bugs and Requests / Re: Add PHP 7.2

« on: 2019-05-17, 20:21:25 »

Remi repo works well for me.

71

Forum Announcements / Re: He is back!!!!!!!!!!!!!!

« on: 2019-05-11, 22:10:00 »

Updates are coming ;-)

Updating:
 mratwork-release   noarch   0.1.0-9    mratwork-release-neutral-noarch   4.1 k

72

Kloxo-MR Bugs and Requests / Update qmail-toaster and spamassassin

« on: 2019-05-05, 16:46:09 »

http://www.qmailtoaster.net/

https://spamassassin.apache.org/downloads.cgi?update=201809160000 to 3.4.2

73

Kloxo-MR Bugs and Requests / Re: Unable to send mail with letsencrypt cert

« on: 2019-05-05, 16:22:33 »

Symlink doesn't work well for qmail. It ignores it. Must be physical file sitting out there.

74

Kloxo-MR Bugs and Requests / Update Kloxo-Hiawatha

« on: 2019-05-04, 12:36:29 »

It's very old now:

/usr/local/lxlabs/kloxo/init/kloxo-hiawatha -v
Hiawatha v10.6, copyright (c) by Hugo Leisink <hugo@leisink.net>

while there is 10.9 out there.

75

Kloxo-MR Bugs and Requests / Re: Enable TLSv1.3 in nginx/Apache

« on: 2019-05-04, 12:30:22 »

Also adding TLS 1.3 early data would be good:

http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_early_data