Topic: Let's Encrypt error: Certificate authority doesn't allow certificate signing

[umbi]

Hi to all

I allso have a problem and i will apreciate any help...
My Server: SME Server 9.2  and unfortunately with both Letsencrypt versions (smeserver-letsencrypt and the dehydrated manually) / all updates done.

Config file is API 2 (tried allso with "auto").

If i genarate under V2 a new domain, all is no problem after "dehydratet -c command" it works perfecty.
But if i add a new host-address in an old domain where (i think is an old V1 certificate) i get following error:

 + Requesting challenge for www.mydomain.com...
 + Already validated!
 + Requesting challenge for newhost.mydomain.com...
  + ERROR: An error occurred while sending post-request to https://acme-v01.api.letsencrypt.org/acme/new-authz (                        Status 403)

Details:
{
  "type": "urn:acme:error:unauthorized",
  "detail": "Error creating new authz :: Validations for new domains are disabled in the V1 API (https://communi                        ty.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430)",
  "status": 403
}

in my case is that here the command to renew all certificates i have to V2 api? - im scared to do it :

config delprop modSSL crt
config delprop modSSL key
config delprop modSSL CertificateChainFile

Thank you in advance for any help

Umbi

[ReetP]

-Deleted-

[umbi]

Hello ReetP

Thank you verry much for your fast reply.

Just to be sure to do the right i do the following steps:

1.)
config delprop modSSL crt
config delprop modSSL key
config delprop modSSL CertificateChainFile

2.)
signal-event console-save
reboot

3.)
config setprop letsencrypt status test
signal-event console-save

4.)
dehydrated -c

If all ok,

5.)
config setprop letsencrypt status enabled
signal-event console-save
+
dehydrated -c -x

6.) at the end
dehydrated --cleanup (-gc)


is that the right order and everything right?

I prefer to ask again to be on the safe side and I appreciate your help very much.


Umbi

[ReetP]

-Deleted-

[umbi]

Hi ReetP

Thank you for your answer and all the first:  HAPPY NEW YEAR!

When are you back from Holliday?
I feel bether if you test before because its an productive server

kind regards
Umbi

[ReetP]

-Deleted-

[waldviertler]

Hello !

Since I have the same problem, but all the answers are deleted: whas that the way to get dehydrated with API2 running?
Thank you very much for answering!

Hello ReetP

Thank you verry much for your fast reply.

Just to be sure to do the right i do the following steps:

1.)
config delprop modSSL crt
config delprop modSSL key
config delprop modSSL CertificateChainFile

2.)
signal-event console-save
reboot

3.)
config setprop letsencrypt status test
signal-event console-save

4.)
dehydrated -c

If all ok,

5.)
config setprop letsencrypt status enabled
signal-event console-save
+
dehydrated -c -x

6.) at the end
dehydrated --cleanup (-gc)


is that the right order and everything right?

I prefer to ask again to be on the safe side and I appreciate your help very much.


Umbi