Lets Encrypt error

[rednas]

Hello,

I am trying to install an SSL certificate following this: https://www.domoticz.com/wiki/Native_se ... ts_Encrypt
However, at this step I receive an error.

Code: Select all

sudo /etc/letsencrypt/letsencrypt-auto certonly --webroot --email <your email> -d <your complete sub.domain name> -w <user home>/domoticz/www/

It starts to run, but then shows this:

Code: Select all

/opt/eff.org/certbot/venv/local/lib/python2.7/site-packages/cryptography/hazmat/bindings/openssl/binding.py:163: CryptographyDeprecationWarning: OpenSSL version 1.0.1 is no longer supported by the OpenSSL project, please upgrade. A future version of cryptography will drop support for it.
  utils.CryptographyDeprecationWarning
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for XXXXX.synology.me
Using the webroot path /home/pi/domoticz/www for all unmatched domains.
Waiting for verification...
Challenge failed for domain XXXXX.synology.me
http-01 challenge for XXXXX.synology.me
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: XXXXX.synology.me
   Type:   unauthorized
   Detail: Invalid response from
   http://XXXXX.synology.me/.well-known/acme-challenge/t9qkaL8f_a_HZChgQsayw2zbX1qHzSz8yG_QCtz-cGM
   [77.165.110.186]: 404

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

Does someone know what is going on??

[peerkersezuuker]

Maybe you get more help over here : https://letsencrypt.org/docs/
¯\_(ツ)_/¯

[rednas]

Hmm, looking through this and checking some things out I come to the following.
I created the folders manually (/.well-known/acme-challenge) and put a file in there.
When I try to access this through http://LOCALIP/.well-known/acme-challenge it throws a 404 error.
However when I try to access this through http://LOCALIP:8080/.well-known/acme-challenge it shows the actual file.
Can someone explain me why this is the case and what I need to do?

[l0gic]

Lets Encrypt looks like it is attempting to connect via http, so port 80
Your domoticz is listening on port 8080.
So I'm guessing you need to look at the port redirection set up on your router, open on port 80 and redirected to 8080, it can be removed once Lets Encrypt is set up.

[Freakandel]

Lets Encrypt looks like it is attempting to connect via http, so port 80
Your domoticz is listening on port 8080.
So I'm guessing you need to look at the port redirection set up on your router, open on port 80 and redirected to 8080, it can be removed once Lets Encrypt is set up.

I had the same problem, this solved it for me, thanks!