I am running a Joomla website, https://www.adem-less.nl . At this moment it has a letsencrypt certificate until Aug20. Getting this certificate was not a problem. Running renew for a new certificate is a problem. The script does not use _www, so the mystery file(s) are just not visible over the inte…

[image] cobrp: Running renew for a new certificate is a problem. The script does not use _www, so the mystery file(s) are just not visible over the internet. Hi @cobrp , Could you explain more about what you mean here? What script are you using? What Let's Encrypt client are you using? How do…

The cert is use ( https://crt.sh/?id=142360569 ) has only these FQDNs in the SAN: X509v3 Subject Alternative Name: DNS:www.adem-less.nl DNS:www.ademless.nl So, it’s safe to assume that a problem will occur when accessing the site(s) via domain names without the leading www; as shown here: https://…

In regards to a solution… It seems that the renewal script is using plain domain names while the initial cert process used only the www names. @schoen Can this cert be expanded to included the base domain names? Or should a completely new cert request be made to include all the required names? I…

Thanks for your fast reply : I did use renew.sh and letsencypt-auto renew. Both were complaining about fetching the two files with long names like VbxAIhlpATGqBAtnCq… I called ‘mystery’ files. My scripts have other rights than _www. So writing the ‘mystery’ files leads to files with the wrong righ…

@rg305 , thank you for your tip! I wil try to expand.

@schoen The following errors were reported by the server: Domain: adem-less.nl Type: connection Detail: Fetching http://adem-less.nl/.well-known/acme-challenge/1Kkh4_YZdZ68KllalmKrB_88QrGf6mDatO7e_o7J_U8: Timeout On server: varvik:acme-challenge cobraspenning$ pwd /Library/Server/Web/…

Hi @cobrp , I’m afraid I don’t agree with your interpretation of this error. “Timeout” means that the certificate authority could not connect to the web server at all, not that the web server refused to serve a file or didn’t recognize the contents of the file. In the permissions -rw-r–r-- for this…

Hi @schoen , Thank you! After the first certification I closed down the sites over port 80. The ports are open again and renewing was an easy job! varvik:my_script cobraspenning$ ./renew.sh Password: 1 identity imported. 2 certificates imported. Thanks again!!!:grinning:

Mac OS X server apache runs under _www

Help

schoen August 18, 2017, 7:09pm 2

Hi @cobrp,

Could you explain more about what you mean here? What script are you using? What Let's Encrypt client are you using? How do you mean that it "does not use _www"?

Topic		Replies	Views
Can renew www but not non-www Help	5	753	June 21, 2019
Trying to renew certificate - almost fixed!	15	18148	June 2, 2016
Random error while renewing or expanding: DNS problem? Server	11	2464	March 22, 2017
Cannot renew certificate Help	16	1263	May 15, 2021
I have a problem renewing my certificate Help	7	2847	August 23, 2018

Mac OS X server apache runs under _www

Related topics