https://bugs.contribs.org/show_bug.cgi?id=10399
--- Comment #17 from Stefan Schulz <[email protected]> ---
It's a static IP 87.140.117.154. No dyndns.
Test with complete output:
# dehydrated -c -x
# INFO: Using main config file /etc/dehydrated/config
Processing ivbonline.de with alternative names: mail.ivbonline.de
saturn.ivbonline.de www.ivbonline.de
+ Checking domain name(s) of existing cert... changed!
+ Domain name(s) are not matching!
+ Names in old certificate: ftp.ivbonline.de ivbonline.de mail.ivbonline.de
proxy.ivbonline.de saturn.ivbonline.de wpad.ivbonline.de www.ivbonline.de
+ Configured names: ivbonline.de mail.ivbonline.de saturn.ivbonline.de
www.ivbonline.de
+ Forcing renew.
+ Checking expire date of existing cert...
+ Valid till Aug 18 20:19:00 2017 GMT (Less than 30 days). Renewing!
+ Signing domains...
+ Generating private key...
+ Generating signing request...
+ Requesting challenge for ivbonline.de...
+ Requesting challenge for mail.ivbonline.de...
+ Requesting challenge for saturn.ivbonline.de...
+ Already validated!
+ Requesting challenge for www.ivbonline.de...
+ Already validated!
+ Responding to challenge for ivbonline.de...
+ Responding to challenge for mail.ivbonline.de...
ERROR: Challenge is invalid! (returned: invalid) (result: {
"type": "http-01",
"status": "invalid",
"error": {
"type": "urn:acme:error:connection",
"detail": "Fetching
http://mail.ivbonline.de/.well-known/acme-challenge/ukfgl7eQAij3DlaGUYfyk4RTnOqCFK9eRkkGiTLWapk:
Timeout",
"status": 400
},
"uri":
"https://acme-v01.api.letsencrypt.org/acme/challenge/g-9EG1VQaIh3i509MRLvuEHOJhpOSyZC_edFZ-sW5r0/1638463558";,
"token": "ukfgl7eQAij3DlaGUYfyk4RTnOqCFK9eRkkGiTLWapk",
"keyAuthorization":
"ukfgl7eQAij3DlaGUYfyk4RTnOqCFK9eRkkGiTLWapk.Q75J23x0B47nDAzopN2iNxgLP3mp2AAxQInqGa-CXNA",
"validationRecord": [
{
"url":
"http://mail.ivbonline.de/.well-known/acme-challenge/ukfgl7eQAij3DlaGUYfyk4RTnOqCFK9eRkkGiTLWapk";,
"hostname": "mail.ivbonline.de",
"port": "80",
"addressesResolved": [
"87.140.117.154",
"2003:a:127f:959a::"
],
"addressUsed": "2003:a:127f:959a::",
"addressesTried": []
}
]
})
less /etc/deyhydrated/config
PARAM_ACCEPT_TERMS="yes"
#!/bin/bash
WELLKNOWN="/home/e-smith/files/ibays/Primary/html/.well-known/acme-challenge"
CA="https://acme-v01.api.letsencrypt.org/directory";
BASEDIR="/etc/dehydrated"
[email protected]
HOOK="/usr/bin/hook-script.sh"
less /etc/dhydrated/domains
ivbonline.de mail.ivbonline.de saturn.ivbonline.de www.ivbonline.de
Server is behind a firewall. Server is unrestricted (whitelisted). No
errors/blocked IP in any log as far as I can see.
ivbonline and mail.ivbonline.de are configured with an AAAA-record.
saturn.ivbonline.de and www.ivbonline.de are configured with an A-record only.
During the renew-process files are created:
# ls -la /home/e-smith/files/primary/html/.well-known/acme-challenge/
insgesamt 16
drwxr-s--- 2 admin shared 4096 29. Jul 05:44 .
drwxr-s--- 3 admin shared 4096 20. Mai 21:57 ..
-rw-r--r-- 1 root shared 87 29. Jul 05:44
_sp2S6OG_pZK7Ueig4_N1-AFqilweEz1d15mY_sjgX8
-rw-r--r-- 1 root shared 87 29. Jul 05:44
ukfgl7eQAij3DlaGUYfyk4RTnOqCFK9eRkkGiTLWapk
--
You are receiving this mail because:
You are the QA Contact for the bug._______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
