Let's Encrypt issue after upgrade to 2.4.0-5

This topic has 28 replies, 4 voices, and was last updated 1 year, 6 months ago by PitzKey.

Post

- February 19, 2020 at 3:23 pm
- Quote
TheG-Man
Participant

Up
1
Down

Hello,

Let’s Encrypt cert stopped renewing after I upgraded to 2.4.0-5.

When I click update on certificate, I get the attached error.

I tried disabling firewall and it didn’t seem to correct the issue.

Thanks!

-G.

Lets-Encrypt.JPG

0

Viewing 15 replies - 1 through 15 (of 28 total)

1 2 →

Replies

- February 19, 2020 at 5:55 pm
- Quote
mo10
Moderator

Up
-1
Down

Just tried it here. Same problem.

0
- February 19, 2020 at 6:02 pm
- Quote
Jose Miguel Rivera
Keymaster

Up
-1
Down

I think this is something related to let’s encrypt server, due, in this version of VitalPBX, nothing has changed on Let’s encrypt library.

0
- February 19, 2020 at 6:04 pm
- Quote
Jose Miguel Rivera
Keymaster

Up
-1
Down

Try the following, enable the access of your PBX through HTTP (Port 80), then, delete the let’s encrypt certificate, and create it again.

0
- February 19, 2020 at 6:34 pm
- Quote
TheG-Man
Participant

Up
-1
Down

@ing-joserivera26

Recreating certificate from scratch worked.

0
- February 19, 2020 at 6:40 pm
- Quote
mo10
Moderator

Up
-1
Down

Would auto renewal usually work on time? A few days before expire?

Thanks

0
- February 19, 2020 at 6:44 pm
- Quote
TheG-Man
Participant

Up
-1
Down

@mo10

Yes, and if it can’t renew Let’s encrypt will send you email saying that your cert will expire in x days.

0
- February 19, 2020 at 7:22 pm
- Quote
mo10
Moderator

Up
-1
Down

Posted by: @ing-joserivera26

Try the following, enable the access of your PBX through HTTP (Port 80), then, delete the let’s encrypt certificate, and create it again.

Did not work for me:
valid until 1970-01-01

0
- February 19, 2020 at 7:44 pm
- Quote
TheG-Man
Participant
Up
-1
Down

@mo10

Are you sure you are not blocking it with firewall?

Try running

systemctl stop firewalld

from console and try adding cert again.

0
- February 19, 2020 at 9:41 pm
- Quote
Jose Miguel Rivera
Keymaster

Up
-1
Down

Posted by: @mo10

Posted by: @ing-joserivera26

Try the following, enable the access of your PBX through HTTP (Port 80), then, delete the let’s encrypt certificate, and create it again.

Did not work for me:
valid until 1970-01-01

Did you get some error on the web UI when trying to regenerate the certificate?

0
- February 19, 2020 at 9:49 pm
- Quote
mo10
Moderator

Up
-1
Down

@ing-joserivera26

Nope, no error.

0
- February 19, 2020 at 9:58 pm
- Quote
Jose Miguel Rivera
Keymaster

Up
-1
Down

Try executing this script on the Linux console

/usr/share/ombutel/scripts/lets_encrypt

Let me know if you get some output.

Make sure you have enabled the access to your PBX trough the port 80

0
- February 19, 2020 at 10:04 pm
- Quote
mo10
Moderator
Up
0
Down

@ing-joserivera26

Nothing happens.

[root@vitalpbx ~]# /usr/share/ombutel/scripts/lets_encrypt
[root@vitalpbx ~]# /usr/share/ombutel/scripts/lets_encrypt
[root@vitalpbx ~]# /usr/share/ombutel/scripts/lets_encrypt

Before deleting the Cert this showed up:

[root@vitalpbx ~]# /usr/share/ombutel/scripts/lets_encrypt
CertCron: Invalid response
header: HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 19 Feb 2020 22:00:41 GMT
Content-Type: application/problem+json
Content-Length: 111
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"

body: {
"type": "urn:ietf:params:acme:error:malformed",
"detail": "No order for ID 1807638746",
"status": 404

0
- February 19, 2020 at 10:38 pm
- Quote
mo10
Moderator
Up
0
Down

Posted by: @theg-man

@mo10

Are you sure you are not blocking it with firewall?

Try running

systemctl stop firewalld

from console and try adding cert again.

Wow, this helped. Thanks. How is that possible?!

Maybe because of Geo-Firewall?

0
- February 20, 2020 at 1:19 pm
- Quote
TheG-Man
Participant

Up
0
Down

@mo10

It could be. Can’t tell. Had a similar issue where I couldn’t update because of firewall and @giovanni-v suggested disabling firewall in console.

0
- February 20, 2020 at 1:21 pm
- Quote
mo10
Moderator
Up
0
Down

Posted by: @mo10

Posted by: @theg-man

@mo10

Are you sure you are not blocking it with firewall?

Try running

systemctl stop firewalld

from console and try adding cert again.

Wow, this helped. Thanks. How is that possible?!

Maybe because of Geo-Firewall?

@ing-joserivera26

Please Check! Thank you.

0