Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: romuva.us
I ran this command:
openssl req -new -sha256 -key domain.key -subj "/" \
-reqexts SAN -config <(cat /ssl/openssl.cnf \
<(printf "\n[SAN]\nsubjectAltName=DNS:romuva.us,DNS:www.romuva.us"))
It produced this output:
cat: /ssl/openssl.cnf: No such file or directory
error on line -1 of /dev/fd/63
47738338784200:error:02001002:system library:fopen:No such file or directory:bss_file.c:169:fopen('/dev/fd/63','rb')
47738338784200:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:172:
47738338784200:error:0E078072:configuration file routines:DEF_LOAD:no such file:conf_def.c:197:
cat: /dev/fd/63: No such file or directory
My web server is (include version): Apache version??
The operating system my web server runs on is (include version): Cloud Linux Server 6.10
My hosting provider, if applicable, is: GoDaddy Shared Hosting
I can login to a root shell on my machine (yes or no, or I don't know): Not clear what the question is - I can login via SSH and I can get to webroot, but can't access anything below. SU is not available
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Yes, but also have SSH access via Putty and The CPanel (ver. 94.0.19?) Terminal widget (there seems to more commands available on the CPanel Widget than using Putty)
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): Can't install certbot. Trying to use gethttpsforfree.com
So I have a shared server on GoDaddy. I have at least two domains I would like to secure, but right now just trying to get one done.
I tried using the command:
openssl req -new -sha256 -key domain.key -subj "/" \
-reqexts SAN -config <(cat /ssl/openssl.cnf \
<(printf "\n[SAN]\nsubjectAltName=DNS:romuva.us,DNS:www.romuva.us"))
as directed on gethttpsforfree
But I get the following error:
cat: /ssl/openssl.cnf: No such file or directory
error on line -1 of /dev/fd/63
47738338784200:error:02001002:system library:fopen:No such file or directory:bss_file.c:169:fopen('/dev/fd/63','rb')
47738338784200:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:172:
47738338784200:error:0E078072:configuration file routines:DEF_LOAD:no such file:conf_def.c:197:
cat: /dev/fd/63: No such file or directory
(I'm assuming this is because of user limitations and the openssl.conf file is located below what I have access to.)
So instead I generate a CSR using GoDaddy's tool.
Everything looks good until I try to Sign my API Request.
I copy and paste the stdin output (I've tried both with and without the "(stdin)= ") and I keep getting this error:
Error: Account registration failed. Please start back at Step 1. { "type": "urn:ietf:params:acme:error:malformed", "detail": "JWS verification error", "status": 400 }
After some digging, discovered that sometimes a line break is inserted when copying and pasting, so I pasted the result into Notepad and discovered an errant linebreak, removed it, then recopied and pasted the text. No luck. Same error.
I'm guessing this has something to do with the auto-request for the CSR - something funky is being added.
I've got a directory called "ssl" at my root. In there are files "ssl.db" and "ssl.db.cache". Subdirectories are "csrs", "certs", and "keys" and with all of those, I see several files. Don't know if this info is helpful. Oh and I did a search for openssl.conf and nothing came up, so I'm sure it's out of my reach.
Anyone have any suggestions for how to solve this? I've been at it for a few hours now. HALP!
