I have reviewed other questions before posting my issue. I am unable to renew the certificate on my Synology NAS. Ports 80 / 443 are forwarded on the router, and confirmed to be open by an external scan. I am unable to create a new certificate either.
I have tried reseting the network, rebooting router and NAS, manually entering the DNS server as the router IP. Nothing has worked.
Logs relating to renewal
2019-10-04T12:03:57+01:00 apollo synoscgi_SYNO.Core.Certificate.LetsEncrypt_1_renew[30878]: certificate.cpp:1448 handle le renew. [F6n9t2]
2019-10-04T12:03:57+01:00 apollo synoscgi_SYNO.Core.Certificate.LetsEncrypt_1_renew[30878]: certificate.cpp:1454 call le tool.
2019-10-04T12:03:59+01:00 apollo synoscgi_SYNO.Core.Certificate.LetsEncrypt_1_renew[30878]: certificate.cpp:973 syno-letsencrypt failed. 1 [syno-letsencrypt output is not a json: ]
2019-10-04T12:03:59+01:00 apollo synoscgi_SYNO.Core.Certificate.LetsEncrypt_1_renew[30878]: certificate.cpp:1458 Failed to renew Let'sEncrypt certificate. [1][syno-letsencrypt output is not a json: ]
Hello, thanks for reviewing. I am using https://www.yougetsignal.com/tools/open-ports/ The firewall was blocking international inbound, which I removed but there is still the same issue even with the ports open.
These are the logs when trying to add a new certificate
2019-10-04T14:44:06+01:00 apollo syno-letsencrypt: syno-letsencrypt.cpp:116 Failed to do new authorization, may retry with another type. [{"error":200,"file":"client_v2.cpp","msg":"Invalid response from http://ds.systematicprint.com/.well-known/acme-challenge/wCE297ZCRP8ZpLRWSwQure6n496ryCfJchGJYy-5YB8 [81.143.170.25]: \"<!DOCTYPE html>\\n<html>\\n<head>\\n<meta charset=\\\"utf-8\\\">\\n<style>body{font-family:Arial,Helvetica,sans-serif;font-size:12px;text-alig\""}
]
2019-10-04T14:44:07+01:00 apollo syno-letsencrypt: syno-letsencrypt.cpp:116 Failed to do new authorization, may retry with another type. [{"error":200,"file":"client_v2.cpp","msg":"do new auth by path: failed to do challenge."}
]
2019-10-04T14:44:07+01:00 apollo synoscgi_SYNO.Core.Certificate.LetsEncrypt_1_create[25797]: certificate.cpp:973 syno-letsencrypt failed. 102 [Failed to new certificate.]
2019-10-04T14:44:07+01:00 apollo synoscgi_SYNO.Core.Certificate.LetsEncrypt_1_create[25797]: certificate.cpp:1392 Failed to create Let'sEncrypt certificate. [102][Failed to new certificate.]
2019-10-04T14:44:17+01:00 apollo syno-letsencrypt: syno-letsencrypt.cpp:116 Failed to do new authorization, may retry with another type. [{"error":200,"file":"client_v2.cpp","msg":"Invalid response from http://ds.systematicprint.com/.well-known/acme-challenge/6imJb2DFPlajKj_vt_WDvateSca1K89KixBBnpUyWD0 [81.143.170.25]: \"<!DOCTYPE html>\\n<html>\\n<head>\\n<meta charset=\\\"utf-8\\\">\\n<style>body{font-family:Arial,Helvetica,sans-serif;font-size:12px;text-alig\""}
]
2019-10-04T14:44:19+01:00 apollo syno-letsencrypt: syno-letsencrypt.cpp:116 Failed to do new authorization, may retry with another type. [{"error":200,"file":"client_v2.cpp","msg":"do new auth by path: failed to do challenge."}
]
2019-10-04T14:44:19+01:00 apollo synoscgi_SYNO.Core.Certificate.LetsEncrypt_1_create[25994]: certificate.cpp:973 syno-letsencrypt failed. 102 [Failed to new certificate.]
2019-10-04T14:44:19+01:00 apollo synoscgi_SYNO.Core.Certificate.LetsEncrypt_1_create[25994]: certificate.cpp:1392 Failed to create Let'sEncrypt certificate. [102][Failed to new certificate.]
It looks like the .well-known/acme-challenge/xxxxx does not exist trying to renew your certificate. The Synology has a custom 404 page that is sent back as response.
(just from looking at your logs)
So I have managed to add a new certificate to replace the previous by creating the folder. Renewal still wasn’t working.
I re-created the /.well-known/acme-challenge folder as per the instructions below
You will need to ssh into the nas…
Create .well-known in the web root (/volume1/web) mkdir /volume1/web/.well-known
Create acme-challenge under .well-known mkdir /volume1/web/.well-known/acme-challenge
Remove the file under letencrypt sudo rm /var/lib/letsencrypt/.well-known
create a link sudo ln -s /volume1/web/.well-known /var/lib/letsencrypt/.well-known
I also removed port forwarding on my router, originally I had 80 forwarding to 5000 and 443 forwarding to 5001 but clearly it didn’t like this, so swapped to 80 > 80 and 443 > 443 instead.