Let's Encrypt problem

5 posts / 0 new

Topic locked

Last post

#1 Fri, 10/07/2016 - 04:06

anduriltdm

Let's Encrypt problem

Hi,

I have a problem with Let's Encrypt.

1) I have installed it :

cd /usr/local
apt-get install git
git clone https://github.com/letsencrypt/letsencrypt
./letsencrypt-auto -help

2) I went to Webmin Configuration and type the full path of Let's Encrypt : http://nsa37.casimages.com/img/2016/10/07/161007111912327814.png

3) I enabled the SSL feature on Virtualhost et request the certificate. But I got an error :

Requesting a certificate for mydomain.com from Let's Encrypt ..
.. request failed : Expected private key file /etc/letsencrypt/keys/privkey.pem was not found

Have you an idea ?

Regards.

#2 Sat, 10/08/2016 - 15:18

martlam

Hi, I encountered this issue as well.

You will need to find the location of the privkey.pem, fullchain.pem and cert.pem and copy them to the expected location.

In my case the keys were located in /etc/letsencrypt/archive/servername.domain.com/privkey1.pem /etc/letsencrypt/archive/servername.domain.com/fullchain1.pem /etc/letsencrypt/archive/servername.domain.com/cert1.pem

So using your root user you copy these files to /etc/letsencrypt/keys/ folder. Copy them so they match the expected file name. i.e cert.pem, privkey.pem, fullchain.pem.

Then you re-run the tool and it should find the key.

Generally speaking, you want to use the built-in Let's Encrypt module to generate keys with Webmin.

#3 Mon, 10/10/2016 - 02:17

anduriltdm

Hi, thank you for your answer. I have now this error :

Parsing account key...
Parsing CSR...
Registering account...
Already registered!
Verifying www.mydomain.com...
Wrote file to /home/mydomain/public_html/.well-known/acme-challenge/MsnROd-5G6S9C_B6Pb5qrfJ9QIfY9U8StrQJcd4DmTY, but couldn't download http://www.mydomain.com/.well-known/acme-challenge/MsnROd-5G6S9C_B6Pb5qrfJ9QIfY9U8StrQJcd4DmTY
Traceback (most recent call last):
  File "/usr/share/webmin/webmin/acme_tiny.py", line 202, in <module>
    main(sys.argv[1:])
  File "/usr/share/webmin/webmin/acme_tiny.py", line 198, in main
    signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, log=LOGGER, CA=args.ca)
  File "/usr/share/webmin/webmin/acme_tiny.py", line 153, in get_crt
    domain, challenge_status))
ValueError: www.mydomain.com challenge did not pass: {u'status': u'invalid', u'validationRecord': [{u'url': u'http://www.mydomain.com/.well-known/acme-challenge/MsnROd-5G6S9C_B6Pb5qrfJ9QIfY9U8StrQJcd4DmTY', u'hostname': u'www.mydomain.com', u'addressUsed': u'185.43.45.35', u'port': u'80', u'addressesResolved': [u'185.43.45.35']}], u'keyAuthorization': u'MsnROd-5G6S9C_B6Pb5qrfJ9QIfY9U8StrQJcd4DmTY.aFh0v8s9auw2l8jGNWuyfqsiHEzYbcxUsYFNjgJmPlg', u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/bUbh-3NizXv7ZzZp0DN5vAQ-xT18v76UB3O5sgatKO4/288593425', u'token': u'MsnROd-5G6S9C_B6Pb5qrfJ9QIfY9U8StrQJcd4DmTY', u'error': {u'status': 403, u'type': u'urn:acme:error:unauthorized', u'detail': u'Invalid response from http://www.mydomain.com/.well-known/acme-challenge/MsnROd-5G6S9C_B6Pb5qrfJ9QIfY9U8StrQJcd4DmTY: "<html>\r\n\r\n   <head>\r\n\r\n      <meta charset="utf-8"/></head>\r\n      <meta name="robots" content="noindex, nofollow">\r\n      <meta"'}, u'type': u'http-01'}

#4 Mon, 10/10/2016 - 02:39

anduriltdm

Hi,

I solve the problem.

Joomla comes with a htaccess file with the following rule meant to 'Block access to "hidden" directories whose names begin with a period':

I had this on .htaccess :

RewriteCond %{REQUEST_URI} !^/.well-known/*
  RewriteRule "(^|/)\." - [F]

Regards.

#5 Tue, 12/13/2016 - 03:20

masterg0g0

hello, i also getting this, is there an issue with the rules in .htaccess?

Best Regards, Rohit
www.interstellarconsulting.com

Topic locked