Topic: Solved - letsencrypt challenge not completing

[SchulzStefan]

Today I've got no more time... tomorrow then.

[SchulzStefan]

Bug raised

https://bugs.contribs.org/show_bug.cgi?id=10521

[SchulzStefan]

Yum reports an update for dehydated:

dehydrated         noarch      0.5.0-3.el6.sme

# rpm -q dehydrated
dehydrated-0.4.0.20170205.git1163864-1.el6.sme.noarch

I can't find the diffs. Could anybody tell what changes have been made?

regards,
stefan

[ReetP]

In CVS or check the git diffs (in the rpm name)

The only thing that has changed is the dehydrated script itself.

Check your bug for more:
https://bugs.contribs.org/show_bug.cgi?id=10521#c8

You should be able to update without any issues.

Nothing has been changed in the smeserver-letsencrypt contrib so it doesn't handle multiple certs etc.

There are more changes in the v0.6 dehydrated script which I am testing, but even that seems to work ok, though I need to make a few notes on updating to it as it uses letsencrypt API v2.

Please report any issues in the bug tracker.

[Jean-Philippe Pialasse]

see
https://github.com/lukas2511/dehydrated/releases/tag/v0.5.0

[SchulzStefan]

In case the server is behind a firewall, it might be important to add this (again) in /usr/bin/dehydrated:

# setting firewall forward proxy
#
export http_proxy=http://192.168.42.1:3128
export https_proxy=http://192.168.42.1:3128

I updated today and will report, if any issues are coming up.

regards,
stefan

[ReetP]

I think you mean 'using a proxy' hence port 3128

Presume you are running a proxy on your router or something.

All mine behind a firewall with simple port forwarding, or in gateway/server with no firewall, have zero issues.

From.what remember of your previous issues, I think your situation is commonly known as an 'edge case'

[umbi]

Hello to all

Im using SME with dehydratet letsencrypt.

i have all ssl domains in domain.txt

domain1
domain2
domain3
(saved wit nano) when i reopen all 3 domains are listed. So it works all perfect, untill i make an sme update and reboot.

when i open again the domain.txt file located in dehydrated directory, there is an old domain.txt file with only domain1 listed.
Domain 2 and 3 are no more in that file.

has someone an idea what i did wrong?

Many thanks in advance for any help.
(if im here in a wrong thread i ask sorry)

[DanB35]

has someone an idea what i did wrong?

Yes--domains.txt is templated.  If you want your changes to survive a system update, you'll need to make them by creating custom template fragments for domains.txt adding your other domain names.

[umbi]

Hi DanB35

Wow havent suspected a so fast answer.
Do you have a help for me, howto

creating custom template fragments for domains.txt

Thx 😊
Greez umbi

[DanB35]

creating custom template fragments for domains.txt

https://wiki.contribs.org/Template_Tutorial

[ReetP]

You should read the letsencrypt page on the wiki on how to add hosts and domains.

https://wiki.contribs.org/Letsencrypt

The templates should be in:

/etc/e-smith/templates/etc/dehydrated/domains.txt

Before making changes copy those templates to:

/etc/e-smith/templates-custom/etc/dehydrated/domains.txt

[umbi]

Hi ReetP
Hi DanB35

I apreciate your replys - thanks 4 it.

I was reading the howto links but as im not really stable on english language so i'm a little unsure. I prefer bether ask befor i make something wrong.

Did i understood correct, when i make for each  domain with following command:

db hosts setprop mail.domain1.com
db hosts setprop www.domain1.com
db hosts setprop domain1.com
- then same with domain2+3

  letsencryptSSLcert enabled
  signal-event console-save

It will automatic create the new entrys in the custom template?

greez
Umbi

[ReetP]

Yes it should.

Try enabling one host eg www, console-save, and check domains.txt to make sure it is correct.

You can use mode 'test' to make sure the certificates are generated.

Then do this to generate them:

Code: [Select]

dehydrated -c -x

[Jean-Philippe Pialasse]

Best way is not to create custom templates which might be forgotten there an dmigh conflict further updates but to actually use the domain panel to set the domain you need, then set the property to enable the ssl cert as per the lets encrypt page

Hi DanB35

Wow havent suspected a so fast answer.
Do you have a help for me, howto

creating custom template fragments for domains.txt

Thx 😊
Greez umbi