ACME_NEED_RENEW ACME_RENEWING |-Creating order.. |-Getting verification information.. |-Verify the dir：/www/wwwroot/xxxxxx.com/.well-known/acme-challenge |-('ACEM_AUTH_ERR', ({'type': 'urn:ietf:params:acme:error:rateLimited', 'detail': "Rate limit for '/acme' reached"},)) ---------------------------------------------------------------------- ACME_RENEWING |-Creating order.. |-The account has more than 5 failed orders within 1 hour, please wait 1 hour and try again! if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); }

hklcf Hello, you have failed more than 5 times in one hour. Please wait patiently for one hour and try again.

/usr/lib64/python2.7/site-packages/cryptography/__init__.py:39: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in a future release. CryptographyDeprecationWarning, ACME_NEED_RENEW ACME_RENEWING |-Creating order.. |-'replay-nonce' ---------------------------------------------------------------------- ---------------------------------------------------------------------------- ★[2021-05-12 00:10:04] Successful ---------------------------------------------------------------------------- if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); }

solution remove the Renew Let's Encrypt Certificate cron job, wait aapanel auto regen the new Renew Let's Encrypt Certificate cron job

I found DeprecationWarning in cron log ACME_NEED_RENEW ACME_RENEWING |-Creating order.. |-Getting verification information.. |-Verification type: dns-01 |-Verification type: dns-01 |-Verifying domain name.. |-Attempt to verify DNS records locally, domain name: _acme-challenge.xxxx.com, type: TXT record value: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx /www/server/panel/class/acme_v2.py:905: DeprecationWarning: please use dns.resolver.resolve() instead ns = dns.resolver.query(domain, s_type) if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); }

hklcf Has your problem been solved? I just tested that the renewal works fine if still have issues, try to execute this command and show me the result. /www/server/panel/pyenv/bin/python -u /www/server/panel/class/acme_v2.py

I know that it is a old topic, but I want to share my solution. go to website > yourdomain > SSL > certificate holder > del the old certificate mail server > SSL > delete old ssl website > domain manager > add your-domain.com and *.your-domain.com website > SSL > DNS verification > Select All > apply website > domain manager > put your old domains (you can delete *.your-domain.com) mail server > SSL > copy the certificate from -> website > ssl ready!

Can't Renew Let's Encrypt Certificate

aaP_johncharlie1272

oh I see why. Cron job didn't work its auto renew. Now were down on production with SSL certificate issue.

aaP_johncharlie1272

Can't generate SSL with wildcard. We need the wildcard any solution? It show this error
Traceback (most recent call last):
File "/www/server/panel/BTPanel/init.py", line 1628, in publicObject
return run_exec().run(toObject, defs, get)
File "/www/server/panel/BTPanel/init.py", line 1576, in run
result = getattr(toObject,get.action)(get)
File "class/acme_v2.py", line 1334, in apply_cert_api
check_result = self.check_auth_env(args, check=True)
File "class/acme_v2.py", line 1426, in check_auth_env
raise public.returnMsg(False, 'ACME_PAN_DOMAIN_ERR')
TypeError: exceptions must derive from BaseException

Were using Debian GNU/Linux 11.

rochendil

Hi guys,
I'm having issues with a site where I am trying to set up SSL.
It's pretty important, this site helps organize medication sending to people in need and this web app helps organize it.

REQUEST_DATE: 2022-05-04 13:46:24
PAN_VERSION: 6.8.24
OS_VERSION: CentOS 8.5.2111 x86_64(Py3.7.9)
REMOTE_ADDR: 82.65.197.99
REQUEST_URI: POST /acme?action=apply_cert_api
REQUEST_FORM: {'domains': '["mydomain.com","*.mydomain.com"]', 'auth_type': 'http', 'auth_to': '1', 'auto_wildcard': '0', 'id': '1'}
USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36

Traceback (most recent call last):
File "/www/server/panel/BTPanel/init.py", line 1628, in publicObject
return run_exec().run(toObject, defs, get)
File "/www/server/panel/BTPanel/init.py", line 1576, in run
result = getattr(toObject,get.action)(get)
File "class/acme_v2.py", line 1334, in apply_cert_api
check_result = self.check_auth_env(args, check=True)
File "class/acme_v2.py", line 1426, in check_auth_env
raise public.returnMsg(False, 'ACME_PAN_DOMAIN_ERR')
TypeError: exceptions must derive from BaseException

aaPanel_Kern

rochendil
Hello, because there is *.mydomain.com, please select mydomain.com separately when applying for SSL, and then apply for SSL, this is a problem and we will fix it. Thanks for the feedback.

aaP_johncharlie1272

aaPanel_Kern

same issue

We're our subdomain website are down because of this. You can renew the main domain, but not the wildcard anymore.

rochendil

aaPanel_Kern
I tried without the * and it didn't work anyways. I had SSL on this before updating the aapanel.
I've tried to fix this by starting over from scratch in the SSL part of the panel.

Can I go back a few patches on aapanel to fix this? It was all working fine until I updated to the latest patch.
People could go without their medication if it takes too long to figure it out.
------------------------------------------Error:
The account has more than 5 failed orders within 1 hour, please wait 1 hour and try again!
Verify domain name:pandevida-medicamentos.com

Verify record:_acme-challenge.mydomain.com

Verify content:AkvdhHt0J340xCeFhqRM3XCcbz0s-4bGRNKwvW-bNTg

Error code😃NS problem: NXDOMAIN looking up TXT for _acme-challenge.mydomain.com - check that a DNS record exists for this domain

Verify results: Verify failed

rochendil

It is on CentOS 8 x64 could this new patch be for a later version of CentOS? Should I update the OS?

aaPanel_Kern

rochendil
Hello, there are more than 5 failed applications in more than 1 hour, please wait 1 hour and try again.
At the same time, the domain name resolution cannot find the TXT record. Please go to the website of the DNS provider to check whether the TXT record exists.
It has nothing to do with the system, we can fix aapanel.

rochendil

aaPanel_Kern I used to have a certificate here that I created in aapanel and it's completely broken.
How can I create a new certificate from the panel? Nothing is working.

Can I check with you and send the exact information for my situation?

aaPanel_Kern

rochendil
Hello, re-apply directly. Note that you need to access port 80 of your site to apply for SSL. There is a CDN, and the redirected site needs to apply for DNS. Also check whether your domain name has a txt record.

rochendil

Hi aapanel_Kern
I checked my DNS settings, they are identical to other servers where I use aapanel to run SSL. Only this one is having an issue. The DNS server and the hosting are all the same. The only differences could be the version of Linux server, or just that my SSL broke and I can't fix it through the panel at all.

When I check the link for the acme page I get a 404 not found.
https://crt.sh/?q=pandevida-medicamentos.com
Shows the certificate hasn't worked since February.
I've tried a lot of things and nothing is working.

I've created a txt, I didn't have one before, but I received a new error that I have tried too many times.
Can you log in and take a look, maybe you will see something I can't.

aaP_kotakomputer.ceo

rochendil Sometime Let's Encrypt fail/busy, usually I use CloudFlare instead because I can not waiting more than 2 hours. i CloudFlare failed then I use Let's Encrypt again.

aaPanel_Kern

rochendil
Hello, your site uses redirect 302, which cannot be verified by file method. You can use DNS method to verify. Please go to the domain name provider to set the DNS settings.

rochendil

aaPanel_Kern
Domain name ["pandevida-medicamentos.com - the domain's nameservers may be malfunctioning"] is currently required to verify the CAA record, please parse the CAA record manually, or retry the application after 1 hour!
Verify domain name:pandevida-medicamentos.com

Verify record:_acme-challenge.pandevida-medicamentos.com

Verify content:Ks5y_S2C_j9uny4fn1QQ36d9d7caS6KYvJ9gpaxZH2E

Error code😃NS problem: SERVFAIL looking up CAA for pandevida-medicamentos.com - the domain's nameservers may be malfunctioning

Verify results: Verify failed

rochendil

aaPanel_Kern

You're not going to believe this, I have a new SSL problem on a different server.
Aapanel just stopped renewing SSL, same problem as before. BUT this time it's a different cause.

https://youtu.be/FSxPDJgYPqc
It renews the SSL certificate but doesn't deploy it or save it.
Any way to fix this?
I tried to update Aapanel, fix it, restart the panel.

rochendil

I fixed it by entering the txt for @ and www. and then it worked for both.

It wouldn't work for the regular domain name by itself.
Thank you for the help.

aaPanel_Kern

rochendil
Hello, click "Other certificate" to have a certificate?

rochendil

aaPanel_Kern

It is empty

aaPanel_Kern

rochendil
This is caused by not installing normal pyOpenSSL. Is it possible to execute the command to install once?
btpip install --upgrade pyOpenSSL bt reload

Yamiraan

@rochendil
Hello, try executing the following command in the ssh tool:
btpip install --upgrade pyOpenSSL
bt reload

« Previous Page