rick
April 2, 2022, 12:52am
1
What’s the process for downgrading to acme 0.21.1 ?
error: certbot 0.21.1 has requirement acme==0.21.1, but you’ll have acme 1.9.0 which is incompatible.”
Running CentOS 7 . Cyber Panel Latest Version 2.1, Build 2
Ran : sh <(curl https://raw.githubusercontent.com/usmannasir/cyberpanel/stable/preUpgrade.sh || wget -O - https://raw.githubusercontent.com/usmannasir/cyberpanel/stable/preUpgrade.sh )
Currently unable to Issus SSL certs… CyberPanel web GUI says “successful” but I end up with a self signed cert.
Then I tried "acme.sh --uninstall "
Ran : sh <(curl https://raw.githubusercontent.com/usmannasir/cyberpanel/stable/preUpgrade.sh || wget -O - https://raw.githubusercontent.com/usmannasir/cyberpanel/stable/preUpgrade.sh )
Removed Certbot : yum remove certbot
Installed Certbot: yum install certbot
Tried: yum --disablerepo=“*” --enablerepo=“litespeed/7/x86_64” install acme ← Failed
CyberPanel do not use certbot for SSLs any more.
Can you share logs of your CyberPanel main log file.
rick
April 2, 2022, 9:34am
3
[04.01.2022_21-55-47] {‘[email protected] ’: (554, b’5.7.1 [email protected] abc.com .abc.com and: www.abc.com abc.com -d www.abc.com --cert-file /etc/letsencrypt/live/abc.com/cert.pem --key-file /etc/letsencrypt/live/abc.com/privkey.pem --fullchain-file /etc/letsencrypt/live/abc.com/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencryptabc.com and: www.abc.com abc.com abc.com [email protected] ’: (554, b’5.7.1 [email protected] abc.com .abc.com and: www.abc.com abc.com -d www.abc.com --cert-file /etc/letsencrypt/live/abc.com/cert.pem --key-file /etc/letsencrypt/live/abc.com/privkey.pem --fullchain-file /etc/letsencrypt/live/abc.com/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencryptabc.com and: www.abc.com abc.com abc.com [email protected] ’: (554, b’5.7.1 [email protected] abc.com .abc.com and: www.abc.com abc.com -d www.abc.com --cert-file /etc/letsencrypt/live/abc.com/cert.pem --key-file /etc/letsencrypt/live/abc.com/privkey.pem --fullchain-file /etc/letsencrypt/live/abc.com/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencryptabc.com and: www.abc.com abc.com abc.com [email protected] ’: (554, b’5.7.1 [email protected] abc.com .abc.com .abc.com . Checking if SSL will expire in 15 days…abc.com and is not ready to renew, skipping…123.com .123.com . Checking if SSL will expire in 15 days…123.com and is not ready to renew, skipping…www.yoyo.com .www.yoyo.com . Checking if SSL will expire in 15 days…www.yoyo.com and is not ready to renew, skipping…456.com .456.com . Checking if SSL will expire in 15 days…456.com and is not ready to renew, skipping…fiber.abc.com .fiber.abc.com . Checking if SSL will expire in 15 days…fiber.abc.com and is not ready to renew, skipping…mail.abc.com .mail.abc.com . Checking if SSL will expire in 15 days…mail.abc.com and is not ready to renew, skipping…mail.123.com .mail.123.com . Checking if SSL will expire in 15 days…mail.123.com and is not ready to renew, skipping…mail.www.yoyo.com .mail.www.yoyo.com . Checking if SSL will expire in 15 days…mail.www.yoyo.com and is not ready to renew, skipping…abc.com .
Reinstalled Acme: wget -O - https://get.acme.sh | sh
Error: “{‘[email protected] ’: (554, b’5.7.1 [email protected]
rick
April 2, 2022, 10:40am
4
Ran the following command: /root/.acme.sh/acme.sh --issue -d yoyo.com -d www.yoyo.com --cert-file /etc/letsencrypt/live/yoyo.com/cert.pem --key-file /etc/letsencrypt/live/yoyo.com/privkey.pem --fullchain-file /etc/letsencrypt/live/yoyo.com/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencrypt
"yoyo.com -d www.yoyo.com --cert-file /etc/letsencrypt/live/yoyo.com/cert.pem --key-file /etc/letsencrypt/live/yoyo.com/privkey.pem --fullchain-file /etc/letsencrypt/live/yoyo.com/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencrypthttps://acme-v02.api.letsencrypt.org/directory Rate Limits - Let's Encrypt ”,How to debug acme.sh · acmesh-official/acme.sh Wiki · GitHub
rick
April 2, 2022, 11:01am
5
/root/.acme.sh/acme.sh --issue -d yoyo.com -d www.yoyo.com --cert-file /etc/letsencrypt/live/yoyo.com/cert.pem --key-file /etc/letsencrypt/live/yoyo.com/privkey.pem --fullchain-file /etc/letsencrypt/live/yoyo.com/fullchain.pem -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencrypthttps://acme-v02.api.letsencrypt.org/directory yoyo.com ’www.yoyo.com ’yoyo.com yoyo.com :Verify error:Invalid response from http://yoyo.com/.well-known/acme-challenge/scP5qPBUNsZeHCM7Cw6F7TwTjrciB1waXIEOAPJyUwM [123.123.123.123]: 404
Now it looks like the verification file is not ending up in http://yoyo.com/.well-known/acme-challenge/
Also tried looking at the log /root/.acme.sh/acme.sh.log ← no log
rick:
Sat Apr 2 04:37:21 MDT 2022] Create new order error. Le_OrderFinalize not found. {Rate Limits - Let’s Encrypt ”,
Looks like too many failed attempts, now it is rate limited.
rick
April 4, 2022, 12:00pm
7
I got it working with the following command:
/root/.acme.sh/acme.sh --issue -d abc.com -d www.abc.com --cert-file /etc/letsencrypt/live/abc.com/cert.pem --key-file /etc/letsencrypt/live/abc.com/privkey.pem --fullchain-file /etc/letsencrypt/live/abc.com/fullchain.pem -w /home/abc.com/public_html/ -k ec-256 --force --server letsencrypt
rick
April 4, 2022, 12:03pm
8
[Mon Apr 4 11:45:07 UTC 2022] Running cmd: registeraccounthttps://acme-v02.api.letsencrypt.org/directory ’https://acme-v02.api.letsencrypt.org/directory ’https://acme-v02.api.letsencrypt.org/directory ’https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/directory ’https://acme-v02.api.letsencrypt.org/acme/key-change ’https://acme-v02.api.letsencrypt.org/acme/new-order ’https://acme-v02.api.letsencrypt.org/acme/new-acct ’https://acme-v02.api.letsencrypt.org/acme/revoke-cert ’https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf ’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/acme/new-acct ’mailto:[email protected] ”], “termsOfServiceAgreed”: true}’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’https://acme-v02.api.letsencrypt.org/acme/new-acct ’https://acme-v02.api.letsencrypt.org/acme/acct/78286629 ’abc.com ’www.abc.com ’https://acme-v02.api.letsencrypt.org/directory ’https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/directory ’https://acme-v02.api.letsencrypt.org/acme/key-change ’https://acme-v02.api.letsencrypt.org/acme/new-order ’https://acme-v02.api.letsencrypt.org/acme/new-acct ’https://acme-v02.api.letsencrypt.org/acme/revoke-cert ’https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf ’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’https://acme-v02.api.letsencrypt.org/directory abc.com ’www.abc.com ’abc.com ’abc.com ’www.abc.com ’www.abc.com ’www.abc.com ’https://acme-v02.api.letsencrypt.org/acme/new-order ’abc.com ”},{“type”:“dns”,“value”:“www.abc.com ”}]}’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’https://acme-v02.api.letsencrypt.org/acme/new-order ’https://acme-v02.api.letsencrypt.org/acme/order/78286629/77249826150 ’https://acme-v02.api.letsencrypt.org/acme/finalize/78286629/77249826150 ’https://acme-v02.api.letsencrypt.org/acme/authz-v3/94729597210 ’https://acme-v02.api.letsencrypt.org/acme/authz-v3/94729597210 ’https://acme-v02.api.letsencrypt.org/acme/authz-v3/94729597220 ’https://acme-v02.api.letsencrypt.org/acme/authz-v3/94729597220 ’abc.com ’abc.com ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw",“token”:"BX10QqAhuOOi_GtgRaku7LkjKN2SV5koozWWjXWrUyE ”’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw ’abc.com#BX10QqAhuOOi_GtgRaku7LkjKN2SV5koozWWjXWrUyE.4SR8HnoeVSN3dXcfmprMsOfjZJmZ2ZvaG6Zo63x3WN8# https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw#http-01#/usr/local/lsws/Example/html ’www.abc.com ’www.abc.com ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597220/IJ-QkQ",“token”:"y8pnkWOUXUkh1uN3I24yrk02nJch0X9273vyHFaf12U ”’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597220/IJ-QkQ ’www.abc.com#y8pnkWOUXUkh1uN3I24yrk02nJch0X9273vyHFaf12U.4SR8HnoeVSN3dXcfmprMsOfjZJmZ2ZvaG6Zo63x3WN8# https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597220/IJ-QkQ#http-01#/usr/local/lsws/Example/html ’abc.com#BX10QqAhuOOi_GtgRaku7LkjKN2SV5koozWWjXWrUyE.4SR8HnoeVSN3dXcfmprMsOfjZJmZ2ZvaG6Zo63x3WN8# https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw#http-01#/usr/local/lsws/Example/html,www.abc.com#y8pnkWOUXUkh1uN3I24yrk02nJch0X9273vyHFaf12U.4SR8HnoeVSN3dXcfmprMsOfjZJmZ2ZvaG6Zo63x3WN8#https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597220/IJ-QkQ#http-01#/usr/local/lsws/Example/html, ’abc.com ’www.abc.com ’abc.com abc.com ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw ’abc.com :Verify error:Invalid response from http://abc.com/.well-known/acme-challenge/BX10QqAhuOOi_GtgRaku7LkjKN2SV5koozWWjXWrUyE [123.123.123.123]: 404https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597210/tdtnlw ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597220/IJ-QkQ ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729597220/IJ-QkQ ’abc.com ’https://acme-v02.api.letsencrypt.org/directory ’https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/directory ’https://acme-v02.api.letsencrypt.org/acme/key-change ’https://acme-v02.api.letsencrypt.org/acme/new-order ’https://acme-v02.api.letsencrypt.org/acme/new-acct ’https://acme-v02.api.letsencrypt.org/acme/revoke-cert ’https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf ’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’https://acme-v02.api.letsencrypt.org/directory abc.com ’abc.com ’abc.com ’abc.com ’https://acme-v02.api.letsencrypt.org/acme/new-order ’abc.com ”}]}’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’https://acme-v02.api.letsencrypt.org/acme/new-order ’https://acme-v02.api.letsencrypt.org/acme/order/78286629/77249859000 ’https://acme-v02.api.letsencrypt.org/acme/finalize/78286629/77249859000 ’https://acme-v02.api.letsencrypt.org/acme/authz-v3/94729638210 ’https://acme-v02.api.letsencrypt.org/acme/authz-v3/94729638210 ’abc.com ’abc.com ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA",“token”:"l9ITRC5AT-XrB3Mf1RSwumlZ7kP60M2-E5N1aVyS8BE ”’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA ’abc.com#l9ITRC5AT-XrB3Mf1RSwumlZ7kP60M2-E5N1aVyS8BE.4SR8HnoeVSN3dXcfmprMsOfjZJmZ2ZvaG6Zo63x3WN8# https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA#http-01#/usr/local/lsws/Example/html ’abc.com#l9ITRC5AT-XrB3Mf1RSwumlZ7kP60M2-E5N1aVyS8BE.4SR8HnoeVSN3dXcfmprMsOfjZJmZ2ZvaG6Zo63x3WN8# https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA#http-01#/usr/local/lsws/Example/html, ’abc.com ’abc.com abc.com ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA ’abc.com :Verify error:Invalid response from http://abc.com/.well-known/acme-challenge/l9ITRC5AT-XrB3Mf1RSwumlZ7kP60M2-E5N1aVyS8BE [168.103.247.126]: 404https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA ’
rick
April 4, 2022, 12:05pm
9
As of right now its working via command line but failing in the WEB GUI. Thinking the problem is this… Not sure how to set the wellknown_path or _currentRoot to get the WEB GUI working again.
/usr/local/lsws/Example/html/ needs to be /home/abc.com/public_html/ ← Any idea on the update command for this?
[Mon Apr 4 11:45:22 UTC 2022] uri=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/94729638210/a0PFrA ’
1 Like
rick
April 4, 2022, 12:32pm
10
MAIN LOG:
[04.04.2022_11-45-18] Failed to obtain SSL for: abc.com and: www.abc.com abc.com abc.com abc.com .
rick
April 8, 2022, 8:39pm
11
Not able to resolve this yet.
I will leave my experience here, as I faced this problem myself. Having received Relay access denied, I went to the DNS tab and filled in all the fields, for example Domain delegated to Sprinthost NS servers (*ns2.sprinthost.ru , ns1.sprinthost.ru , ns3.sprinthost.net , ns4.sprinthost.net
Same here.
Have you found a solution to change the path?
