# No "chown" as acmeuser

**URL:** <https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370>\
**Category:** Help\
**Created:** [July 24, 2021, 7:27am UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370 "2021-07-24T07:27:13Z")\
**Posts on this page:** 9\
**Page:** 2

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [July 27, 2021, 7:11pm UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370/21 "2021-07-27T19:11:42Z")

</div>

> [@Paul56](#):
>
> ```nohighlight
> server {
> listen 80;
> listen [::]:80;
> server_name meet.freundel.net;
> 
> location ^~ /.well-known/acme-challenge/ {
> default_type "text/plain";
> root /usr/share/jitsi-meet; <<<<<<<<<< CHANGE THIS LINE
> }
> location = /.well-known/acme-challenge/ {
> return 404;
> }
> location / {
> return 301 https://$host$request_uri;
> }
> }
> 
> ```

Change that line to match the `--webroot` used in the command:  
Like in the other vhost:

> [@Paul56](#):
>
> ` root /tmp/letsencrypt;`

---

<div class="post-metadata">

**Author:** ![Paul56](https://avatars.discourse-cdn.com/v4/letter/p/f07891/32.png) [@Paul56](https://community.letsencrypt.org/u/Paul56)\
**Post date:** [July 27, 2021, 7:37pm UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370/22 "2021-07-27T19:37:07Z")

</div>

Thank you very much. Now the acme script reloaded successful.

The script ran without --test succesful. I restarted nginx. But I still cannot reach the website.

Do you have a tip more, where to look for the cause?

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [July 27, 2021, 7:43pm UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370/23 "2021-07-27T19:43:59Z")

</div>

> [@Paul56](#):
>
> I restarted nginx. But I still cannot reach the website.

Which web site exactly?  
What message do you get?

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [July 27, 2021, 7:49pm UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370/24 "2021-07-27T19:49:37Z")

</div>

It seems that you have two certs (RSA & ECC) in your `nginx` config:

```nohighlight
    ssl_certificate /etc/letsencrypt/rsa-certs/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/rsa-certs/privkey.pem;
    ssl_certificate /etc/letsencrypt/ecc-certs/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/ecc-certs/privkey.pem;

```

But you have only renewed one of them.

You can renew the ECC cert OR remove it from your config.

---

<div class="post-metadata">

**Author:** ![Paul56](https://avatars.discourse-cdn.com/v4/letter/p/f07891/32.png) [@Paul56](https://community.letsencrypt.org/u/Paul56)\
**Post date:** [July 27, 2021, 8:08pm UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370/25 "2021-07-27T20:08:32Z")

</div>

Now it works. Thank you very much for your help and your patience.

Just one question more: In all that published information, is there something critical regarding security, which should be changed now.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [July 27, 2021, 8:21pm UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370/26 "2021-07-27T20:21:45Z")

</div>

> [@Paul56](#):
>
> is there something critical regarding security, which should be changed now.

Not much.  
I removed the file for `nginx -T` for good measure 🙂  
You can check your with: [SSL Server Test: meet.freundel.net (Powered by Qualys SSL Labs)](https://www.ssllabs.com/ssltest/analyze.html?d=meet.freundel.net)

Cheers from Miami 🍻

#FreeCuba

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [July 27, 2021, 8:27pm UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370/27 "2021-07-27T20:27:48Z")

</div>

nothing critical...  
But you might benefit from adding DNS CAA records and OCSP stapling.

---

<div class="post-metadata">

**Author:** ![Paul56](https://avatars.discourse-cdn.com/v4/letter/p/f07891/32.png) [@Paul56](https://community.letsencrypt.org/u/Paul56)\
**Post date:** [July 27, 2021, 8:58pm UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370/28 "2021-07-27T20:58:39Z")

</div>

Thank you. I will have a look on it.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [August 26, 2021, 8:59pm UTC](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370/29 "2021-08-26T20:59:07Z")

</div>

Closed on August 26, 2021, 8:59pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

[Previous page](https://community.letsencrypt.org/t/no-chown-as-acmeuser/156370.md?page=1)