Problems with update ssl certificate on Vicibox 11

[vanmido]

Hi everyone

Community, my problem is that cannot renew my ssl certificate in the last version of Vicibox (11), I don't have any problems with the firewall system because I have another Vicidial servers work fine. The log result acme.sh script is:

my.domain.com:Verify error:65.xx.xx.xx: Invalid response from http://my.domain.com/.well-known/acme-c ... r1OY7aJpec: 404

I had the same problem with other server, but, I had to delete it. I never knew what happening. But in this case, this is a production server

If anyone can tell me what to do, I'll appreciate it

Regards









i

[carpenox]

try to turn the firewall off temp

service firewalld stop
then renew
service firewalld start

[williamconley]

carpenox is likely 100% right... Assuming you're using firewalld and not iptables (which is very likely with Vicibox 11).

remember that the certbot has to hit your server to confirm the file it places there temporarily for this process. If your firewall is closed, they won't find the file and will reject your cert attempt.

But they do not post their IP ranges so you have to open to "the world" temporarily for them to check. However: If you do this quickly (less than 5 minutes) the likelihood of an intrusion during the event is very slim.

Also note that you CAN renew the certificate at 61 days, you do not have to wait until the last minute. That way if something goes wrong you have 28 days to figure it out before panicking.