I am trying to renew SSL certificate from the aapanel. I am getting notification that SSL is renewed successfully. But on the website dashboard its showing its not renewed.

aaP_anandjani i don't know how ssl let's encrypt working in aapanel, i have a trick for do this, disable ssl first enable again without renewal before relax untul 3 month again see error?

Hello, please go to the Cron interface to view the log of the task "Renew Let's Encrypt Certificate" aaP_anandjani

|-The domain name skipped this time: ['hitrust.com.sg', '*.hitrust.com.sg'], because the last renewal failed, you still need to wait 0 hours and try again |-The website has been suspended, skip certificate renewal! |-No SSL certificate found within 30 days! |-All tasks have been processed! ★[2024-06-03 00:10:01] Successful |-The website has been suspended, skip certificate renewal! |-A total of 1 certificates need to be renewed |-Renew the visa certificate and start checking the environment |-Renewing certificate number of 1，domain: ['hitrust.com.sg', '*.hitrust.com.sg'].. |-Creating order.. /www/server/panel/class/acme_v2.py:1220: DeprecationWarning: sign() is deprecated. Use the equivalent APIs in cryptography. return OpenSSL.crypto.sign(pk, message.encode("utf8"), self._digest) |-Getting verification information.. |-Verification type: dns-01 |-Verifying domain name.. |-Attempt to verify DNS records locally, domain name: _acme-challenge.hitrust.com.sg, type: TXT record value: 5EI8rgQ8fdKB0vPanMjGheCw-QYtPf4bfszhtoeE8tw /www/server/panel/class/acme_v2.py:1016: DeprecationWarning: please use dns.resolver.resolve() instead ns = dns.resolver.query(domain, s_type) |-Number of verifications: 1, value: 5EI8rgQ8fdKB0vPanMjGheCw-QYtPf4bfszhtoeE8tw |-Local authentication succeeded! |-1 Query verification results.. |-Verification succeeded! |-Sending CSR.. /www/server/panel/class/acme_v2.py:1050: DeprecationWarning: X509Extension support in pyOpenSSL is deprecated. You should use the APIs in cryptography. OpenSSL.crypto.X509Extension( |-Downloading certificate.. |-Failed to download certificate: {'type': 'urn:ietf:params:acme:error:malformed', 'detail': 'Certificate not found', 'status': 404} ★[2024-06-04 00:10:43] Successful

aaPanel_Kern |-The domain name skipped this time: ['hitrust.com.sg', '*.hitrust.com.sg'], because the last renewal failed, you still need to wait 0 hours and try again |-The website has been suspended, skip certificate renewal! |-No SSL certificate found within 30 days! |-All tasks have been processed! ★[2024-06-03 00:10:01] Successful |-The website has been suspended, skip certificate renewal! |-A total of 1 certificates need to be renewed |-Renew the visa certificate and start checking the environment |-Renewing certificate number of 1，domain: ['hitrust.com.sg', '*.hitrust.com.sg'].. |-Creating order.. /www/server/panel/class/acme_v2.py:1220: DeprecationWarning: sign() is deprecated. Use the equivalent APIs in cryptography. return OpenSSL.crypto.sign(pk, message.encode("utf8"), self._digest) |-Getting verification information.. |-Verification type: dns-01 |-Verifying domain name.. |-Attempt to verify DNS records locally, domain name: _acme-challenge.hitrust.com.sg, type: TXT record value: 5EI8rgQ8fdKB0vPanMjGheCw-QYtPf4bfszhtoeE8tw /www/server/panel/class/acme_v2.py:1016: DeprecationWarning: please use dns.resolver.resolve() instead ns = dns.resolver.query(domain, s_type) |-Number of verifications: 1, value: 5EI8rgQ8fdKB0vPanMjGheCw-QYtPf4bfszhtoeE8tw |-Local authentication succeeded! |-1 Query verification results.. |-Verification succeeded! |-Sending CSR.. /www/server/panel/class/acme_v2.py:1050: DeprecationWarning: X509Extension support in pyOpenSSL is deprecated. You should use the APIs in cryptography. OpenSSL.crypto.X509Extension( |-Downloading certificate.. |-Failed to download certificate: {'type': 'urn:ietf:params:acme:error:malformed', 'detail': 'Certificate not found', 'status': 404} ★[2024-06-04 00:10:43] Successful

Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com . It is recommended to fill in the following Post link: SSH IP address, account password and port: aapanel login link address and account password: Detailed problem description: No post link will not be able to know which user's information is, and the problem will not be processed aaP_anandjani

I am facing similar problems, as I reported here: https://www.aapanel.com/forum/d/19981-problems-to-auto-renew-ssl-certificates-lets-encrypt/7 The problems is present since, at least, aaPanel version 6.8.36. Now I am running version 7.0.8. What the cron logs register changed a little, but the problem still is there. The cron logs are registering the certificates were renewed, but they were not. Maybe the renewed certificates are saved in the wrong location. I did the manual renew of SSL certificates a couple of times, but after 2 months, the certificates were not renewed again. Now, in version 7.0.8 seems there is no more button to manual renew the SSL certificate.

Hello, since the SSL Certificate brand has changed, it is currently not supported. This issue will be optimized in the future. Nanno

aaPanel_Kern I have the same issues with the auto SSL certificate renewal via Cron. its logs said that it said. No SSL certificate found within 30 days! if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } This is my domain list I also had my manual renewal SSL certificate which I wish to renew all certificates that are below 30 days on Cron. it happened to install the panel SSL. However, the expired date on the list is not updated yet. Cron logs ---------------------------------------------------------------------------- |-A total of 1 certificates need to be renewed |-Renew the visa certificate and start checking the environment [] |-Renewing certificate number of 1，domain: ['aapanel.localdomain'].. |-Creating order.. |-Getting verification information.. |-Verify the dir：/www/wwwroot/panel_ssl_site/.well-known/acme-challenge |-Verification type: http-01 |-Verifying domain name.. |-1 Query verification results.. |-Verification succeeded! |-Sending CSR.. |-Downloading certificate.. |-Renewed successfully!! ---------------------------------------------------------------------- ---------------------------------------------------------------------------- ★[2024-08-25 08:32:36] Successful ---------------------------------------------------------------------------- |-No SSL certificate found within 30 days! |-All tasks have been processed! ---------------------------------------------------------------------------- if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } I did to renew another SSL certificate by manually execute the Cron task once again and no renewal actions for another domains ★[2024-08-25 08:33:51] Successful ---------------------------------------------------------------------------- |-No SSL certificate found within 30 days! |-All tasks have been processed! ---------------------------------------------------------------------------- if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } Kindly please check why this happened?

Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com . It is recommended to fill in the following Post link: SSH IP address, account password and port: aapanel login link address and account password: Detailed problem description: No post link will not be able to know which user's information is, and the problem will not be processed aaP_demo1

not able to renew SSL certificates on the website

aaP_demo1

aaPanel_Kern
Hi, Kern

I just updated my info to your email now. Please kindly proceed and reply me back with your public IP so I can allow access to the server.

Thank you.

aaPanel_Kern

Hello, we have received your email and logged in successfully

aaP_demo1

aaPanel_Kern
Thank you, Kern

aaP_demo1

aaPanel_Kern

Please let me know your update on this issue. Thank you

aaPanel_Kern

Hi, thanks for your information. Currently, the developer can see from the database that you use DNS verification and manually resolve domain name records. This will not automatically renew.
DNS verification requires the use of DNS API to automatically renew

aaP_demo1

aaPanel_Kern

all my domain names were using DNS Verification and fully manual by DNS manager in aaPanel.
Am I going to manually renew the SSL Certificate or reissue the SSL certificate using File Verification one by one?

I just want the method that could help me enable auto-renew certificate of my domain name in the future.

aaPanel_Kern

Hello, please do not use a DNS manager. Use the domain name provider’s website directly to manage domain names.
Use file verification, or use the CloudFlare API with DNS verification

aaP_demo1

aaPanel_Kern

Okay, I understand this one. However, if it is possible to make this works to use domain with DNS manager. I appreciated it so much. Thanks @aaPanel_Kern

aaP_saintfriday001

Hello, please help me with certificate updates. Certificates for all domains are not updated. The update hangs on the first certificate with this log.

aaPanel_Kern

Hello, thank you for your feedback, we will optimize this issue
You can also try to renew SSL manually in the website

aaP_saintfriday001

aaP_krzysztof

@aaPanel_Kern since Lets Encrypt SSL autorenewal in cronjob (/www/server/panel/pyenv/bin/python -u /www/server/panel/class/acme_v2.py --renew=1) has not been working for sometime now (the log shows successful renewal message but the SSL is not updated) is there any work around to this to make it automated? or a command that can be used to put into custom cron job?

For example, since manual renewal works fine, what is the manual bash command that can we use to put into cronjob?

Other than that, is there any ETA when you fix the cronjob for Let's Encrypt SSL autorenewal?

I had this issue with 6.8.x, upgraded to 7.0.13 and the issue remains the same.

aaPanel_Kern

Hello, it is recommended that you renew manually first. Is this normal?
Are you using DNS verification or http verification?

aaP_krzysztof

aaPanel_Kern before we start potentially-many-days-investigation here could you please just for now show us the terminal / python command that triggers the same action as when we go to Site modification and hit Renewal SSL so can run this command manually from system cronjob?

I use default settings which is http-verification.

aaP_krzysztof

@aaPanel_Kern on top of that, I deleted on of the sites and domain completely. This domain was included in the SSL wildcard.

Now after removal, the SSL is still trying to renew the removed domain causing renewal error.

I deleted SSL and tried to recreate - same issue.

I deleted /www/server/panel/config/letsencrypt_v2.json file but problem remains.

Where is this domain stored? It's not present on the Websites list, it's not attached to any existing sites but still is somehow visible to the letsencrypt script. How to delete the domain then?

aaPanel_Kern

Hello, I suggest you wait for this issue to be fixed. If the SSL certificate is about to expire, please renew it manually first

aaP_krzysztof

@aaPanel_Kern I'd like to ask you again: do you know the command that is run when manual renewal button is used? I'd like to use that command manually in system cronjob while waiting for the fixes.

aaPanel_Kern

Hello, you can only apply manually first, we will optimize this part in the follow -up part

haris

aaPanel_Kern
this SSL renewal is really BIG BUGS. i'm 7.0.12 also still not fixed. had to always manually renew every 3 months. whats the deal actually?? maybe it's time to move to different server panel.

aaP_root10

I cleared the data in the file /www/server/panel/data/exclude_hash.json, then ran the renew process, and it worked again.

luckybhumkar

aaP_root10 I tried this. But it doesn't renew SSL, even though it makes SSL Cron detect domains that are less than 30 days old. It also shows the successful message.

xemles

aaP_root10 I fuckin' love you. That solved it for me, after so many months

« Previous Page