Need help updating acme

rg305 · July 30, 2021, 8:32pm

I only asked for you to install acme.sh.
ONLY INSTALL
Is it installed?
Please show:
sudo /root/.acme.sh/acme.sh version

Hezer · July 30, 2021, 8:54pm

/root/.acme.sh/acme.sh version

v3.0.0

rg305 · July 30, 2021, 8:58pm

Perfect, now you have an ACMEv2 compatible client installed.
Now lets try to use it to get the cert you need...

We will replace this certbot plan with acme.sh

Try:

apachectl -k stop
/root/.acme.sh/acme.sh --issue --standalone -d your.mail.domain -m your.email.address
apachectl -k start

Hezer · July 30, 2021, 9:14pm

apachectl -k stop
httpd (no pid file) not running
/root/.acme.sh/acme.sh --issue --standalone -d mail.ivanovoobl.ru -m it@ivanovoobl.ru
[Сб июл 31 00:11:25 MSK 2021] Using CA: https://acme.zerossl.com/v2/DV90
[Сб июл 31 00:11:25 MSK 2021] Standalone mode.
[Сб июл 31 00:11:25 MSK 2021] Single domain='mail.ivanovoobl.ru'
[Сб июл 31 00:11:25 MSK 2021] Getting domain auth token for each domain
[Сб июл 31 00:11:28 MSK 2021] Getting webroot for domain='mail.ivanovoobl.ru'
[Сб июл 31 00:11:28 MSK 2021] Verifying: mail.ivanovoobl.ru
[Сб июл 31 00:11:28 MSK 2021] Standalone mode server
[Сб июл 31 00:11:29 MSK 2021] Processing, The CA is processing your order, please just wait. [Сб июл 31 00:12:51 MSK 2021] mail.ivanovoobl.ru:Timeout
[Сб июл 31 00:12:51 MSK 2021] Please add '--debug' or '--log' to check more details.
[Сб июл 31 00:12:51 MSK 2021] See: How to debug acme.sh · acmesh-official/acme.sh Wiki · GitHub

rg305 · July 30, 2021, 9:16pm

Apache did not stop?
[it must first stop]
How do you stop Apache?

rg305 · July 30, 2021, 9:17pm

This is also a bit of a problem here:

Hezer · July 30, 2021, 9:32pm

it is not running as I mentioned earlier

rg305 · July 30, 2021, 9:50pm

I know what you said.
But something is still there:

curl -Iki http://mail.ivanovoobl.ru/
HTTP/1.1 503 Service Temporarily Unavailable
Date: Fri, 30 Jul 2021 21:50:27 GMT
Connection: close
Content-Type: text/html; charset=iso-8859-1

Hezer · July 30, 2021, 10:04pm

so what to do?

rg305 · July 30, 2021, 10:06pm

Hezer · July 30, 2021, 10:23pm

sudo ps -ef | grep -Ei 'apache|http' | grep -v grep
sudo netstat -pant | grep -E '80|443'
tcp 0 0 192.168.110.8:143 192.168.110.21:58020 ESTABLISHED 43357/imap
tcp 0 0 192.168.110.8:143 192.168.110.21:58015 ESTABLISHED 43349/imap
tcp 0 0 192.168.110.8:143 192.168.110.188:57585 ESTABLISHED 64806/imap
tcp 0 0 192.168.110.8:143 176.59.51.64:20280 ESTABLISHED 18441/imap
tcp 0 0 192.168.110.8:22 192.168.110.203:14080 ESTABLISHED 48681/sshd
tcp 0 0 192.168.110.8:143 192.168.110.21:58013 ESTABLISHED 43348/imap

rg305 · July 30, 2021, 11:02pm

I also don't see any Apache running.
So, whatever is responding with "503" is likely part of the problem.

What does your server plug into?

Hezer · July 31, 2021, 9:08am

I didn't quite understand your question

Hezer · July 31, 2021, 5:59pm

so what should I do?

rg305 · July 31, 2021, 6:01pm

You need to find the device that is responding to HTTP (with the 503 error).
Once found, you can begin to understand how to reconfigure it to your needs.

Hezer · July 31, 2021, 6:35pm

I did not set up this "kitchen" could you explain what exactly to look for and look for

rg305 · July 31, 2021, 9:57pm

Follow the wires.
What does your server plug into?
What does that plug into?
...
[how to do reach the Internet - how does it reach you?]

Hezer · August 2, 2021, 2:14pm

tell me what ip and what domain name to specify in the dns record so that my server can reach the letsencrypt resource because there is no connection between them then the command
Â

sudo certbot certonly --manual --manual-public-ip-logging-ok --preferred-challenges dns-01 --server https://acme-v02.api.letsencrypt.org/directory -d mail.ivanovoobl.ru -m it@ivanovoobl.ru

Â

rg305 · August 2, 2021, 2:22pm

What do you mean?
Please show any error or message.

Hezer · August 2, 2021, 2:35pm

according to this type, I need to add the ip and the name lensencrypt so that the command works and letsencrypt can reach my server