ich richte aktuell Letsencrypt ein und stoße dabei auf Fehler.
Dieser Fehler könnte bereits die Erklärung beinhalten:
root@1383561341-1:~# apache2ctl -M
AH00526: Syntax error on line 16 of /etc/apache2/sites-enabled/35_froxlor_ssl_vhost_medienbrief.schule.conf:
SSLCertificateFile: file '/etc/apache2/apache2.pem' does not exist or is empty
Action '-M' failed.
The Apache error log may have more information.
Muss ich manuell ein apache2.pem erzeugen? Ich habe bei den vielen Letsencrypt-Einleitungen nirgendswo darüber etwas gelesen. Geht das dann wie hier beschrieben:
Mit der ACME Version 2 hänge ich hier:
[information] Updating Let's Encrypt certificates
[information] Updating medienkompetenz.jetzt
[information] Adding SAN entry: medienkompetenz.jetzt
[information] Adding SAN entry: www.medienkompetenz.jetzt
[information] letsencrypt-v2 Using 'https://acme-v02.api.letsencrypt.org' to generate certificate
[information] letsencrypt-v2 Using existing account key
[information] letsencrypt-v2 Starting new account registration
[information] letsencrypt-v2 Getting last terms of service URL
[information] letsencrypt-v2 Sending registration to letsencrypt server
Ich habe auf Version 1 umgestellt (siehe unten), da geht es schon besser.
Das Verzeichnis /var/www/froxlor/.well-known/acme-challenge ist leer. Ich habe testweise eine index.html dort erstellt. Wenn ich das Verzeichnis http://medienkompetenz.jetzt/.well-known/acme-challange/ öffne erhalte ich, die index.html nicht, auch nicht wenn ich die .htaccess entferne. Daher müsste auch bei der Umleitung noch ein Fehler vorliegen.
Ich habe die Datei /etc/apache2/conf-enabled/acme.conf erstellt:
Alias"/.well-known/acme-challenge""/var/www/froxlor/.well-known/acme-challenge"<Directory"/var/www/froxlor/.well-known/acme-challenge">Require all granted
</Directory>
Hier die Fehler, die bei der Version 1 von ACME aufgetreten sind (beim 2. Versuch unten kam der Fehler, dass ich mich zu oft angemeldet habe. Da muss ich einfach warten)
root@1383561341-1:~# php -q /var/www/froxlor/scripts/froxlor_master_cronjob.php --letsencrypt --debug
[information] Updating Let's Encrypt certificates
[information] Updating medienbrief.schule
[information] Adding SAN entry: medienbrief.schule
[information] Adding SAN entry: www.medienbrief.schule
[information] letsencrypt Using 'https://acme-v01.api.letsencrypt.org' to generate certificate
[information] letsencrypt Using existing account key
[information] letsencrypt Starting certificate generation process for domains
[information] letsencrypt Requesting challenge for medienbrief.schule
[information] letsencrypt Sending signed request to /acme/new-authz
[information] letsencrypt Got challenge token for medienbrief.schule
[information] letsencrypt Token for medienbrief.schule saved at /var/www/froxlor/.well-known/acme-challenge/123456 and should be available at http://medienbrief.schule/.well-known/acme-challenge/123456
[warning] [Lets Encrypt self-check] Please check http://medienbrief.schule/.well-known/acme-challenge/123456 - token seems to be not available. This is just a simple self-check, it might be wrong but consider using this information when Let's Encrypt fails to issue a certificate
[information] letsencrypt Sending request to challenge
[information] letsencrypt Sending signed request to https://acme-v01.api.letsencrypt.org/acme/challenge/667788/7890
[information] letsencrypt Verification pending, sleeping 1s
[error] Could not get Let's Encrypt certificate for medienbrief.schule: Verification ended with error: {"identifier":{"type":"dns","value":"medienbrief.schule"},"status":"invalid","expires":"2018-06-13T07:56:31Z","challenges":[{"type":"dns-01","status":"invalid","uri":"https:\/\/acme-v01.api.letsencrypt.org\/acme\/challenge\/667788\/6789","token":"zui123"},{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:unauthorized","detail":"Invalid response from http:\/\/medienbrief.schule\/.well-known\/acme-challenge\/123456: \"<!DOCTYPE html>\n<!--[if IE 7]>\n<html class=\"ie ie7\" lang=\"de-DE\" prefix=\"og: http:\/\/ogp.me\/ns#\">\n<![endif]-->\n<!--[if IE 8]>\n<ht\"","status":403},"uri":"https:\/\/acme-v01.api.letsencrypt.org\/acme\/challenge\/667788\/7890","token":"123456","keyAuthorization":"123456.abcdef","validationRecord":[{"url":"http:\/\/medienbrief.schule\/.well-known\/acme-challenge\/123456","hostname":"medienbrief.schule","port":"80","addressesResolved":["109.75.177.194"],"addressUsed":"109.75.177.194"}]}],"combinations":[[0],[1]]}
[information] Updating medienkompetenz.jetzt
[information] Adding SAN entry: medienkompetenz.jetzt
[information] Adding SAN entry: www.medienkompetenz.jetzt
[information] letsencrypt Using 'https://acme-v01.api.letsencrypt.org' to generate certificate
[information] letsencrypt Using existing account key
[information] letsencrypt Starting certificate generation process for domains
[information] letsencrypt Requesting challenge for medienkompetenz.jetzt
[information] letsencrypt Sending signed request to /acme/new-authz
[information] letsencrypt Got challenge token for medienkompetenz.jetzt
[information] letsencrypt Token for medienkompetenz.jetzt saved at /var/www/froxlor/.well-known/acme-challenge/fedcba and should be available at http://medienkompetenz.jetzt/.well-known/acme-challenge/fedcba
[warning] [Lets Encrypt self-check] Please check http://medienkompetenz.jetzt/.well-known/acme-challenge/fedcba - token seems to be not available. This is just a simple self-check, it might be wrong but consider using this information when Let's Encrypt fails to issue a certificate
[information] letsencrypt Sending request to challenge
[information] letsencrypt Sending signed request to https://acme-v01.api.letsencrypt.org/acme/challenge/zuiop/44553322
[information] letsencrypt Verification pending, sleeping 1s
[error] Could not get Let's Encrypt certificate for medienkompetenz.jetzt: Verification ended with error: {"identifier":{"type":"dns","value":"medienkompetenz.jetzt"},"status":"invalid","expires":"2018-06-13T07:56:35Z","challenges":[{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:unauthorized","detail":"Invalid response from http:\/\/medienkompetenz.jetzt\/.well-known\/acme-challenge\/fedcba: \"<!DOCTYPE html>\n<!--[if IE 7]>\n<html class=\"ie ie7\" lang=\"de-DE\">\n<![endif]-->\n<!--[if IE 8]>\n<html class=\"ie ie8\" lang=\"de-DE\">\"","status":403},"uri":"https:\/\/acme-v01.api.letsencrypt.org\/acme\/challenge\/zuiop\/44553322","token":"fedcba","keyAuthorization":"fedcba.abcdef","validationRecord":[{"url":"http:\/\/medienkompetenz.jetzt\/.well-known\/acme-challenge\/fedcba","hostname":"medienkompetenz.jetzt","port":"80","addressesResolved":["109.75.177.194"],"addressUsed":"109.75.177.194"}]},{"type":"dns-01","status":"invalid","uri":"https:\/\/acme-v01.api.letsencrypt.org\/acme\/challenge\/zuiop\/56789","token":"def01234"}],"combinations":[[1],[0]]}
[information] Let's Encrypt certificates have been updated
[notice] Checking system's last guid
You have new mail in /var/mail/root
root@1383561341-1:~# php -q /var/www/froxlor/scripts/froxlor_master_cronjob.php --letsencrypt --debug
[information] Updating Let's Encrypt certificates
[information] Updating medienbrief.schule
[information] Adding SAN entry: medienbrief.schule
[information] Adding SAN entry: www.medienbrief.schule
[information] letsencrypt Using 'https://acme-v01.api.letsencrypt.org' to generate certificate
[information] letsencrypt Using existing account key
[information] letsencrypt Starting certificate generation process for domains
[information] letsencrypt Requesting challenge for medienbrief.schule
[information] letsencrypt Sending signed request to /acme/new-authz
[error] Could not get Let's Encrypt certificate for medienbrief.schule: No challenges received for medienbrief.schule. Whole response: {"type":"urn:acme:error:rateLimited","detail":"Error creating new authz :: too many failed authorizations recently: see https:\/\/letsencrypt.org\/docs\/rate-limits\/","status":429}
[information] Updating medienkompetenz.jetzt
[information] Adding SAN entry: medienkompetenz.jetzt
[information] Adding SAN entry: www.medienkompetenz.jetzt
[information] letsencrypt Using 'https://acme-v01.api.letsencrypt.org' to generate certificate
[information] letsencrypt Using existing account key
[information] letsencrypt Starting certificate generation process for domains
[information] letsencrypt Requesting challenge for medienkompetenz.jetzt
[information] letsencrypt Sending signed request to /acme/new-authz
[error] Could not get Let's Encrypt certificate for medienkompetenz.jetzt: No challenges received for medienkompetenz.jetzt. Whole response: {"type":"urn:acme:error:rateLimited","detail":"Error creating new authz :: too many failed authorizations recently: see https:\/\/letsencrypt.org\/docs\/rate-limits\/","status":429}
[information] Let's Encrypt certificates have been updated
[notice] Checking system's last guid
Question
tt33tt
Hallo alle zusammen,
ich richte aktuell Letsencrypt ein und stoße dabei auf Fehler.
Dieser Fehler könnte bereits die Erklärung beinhalten:
Muss ich manuell ein apache2.pem erzeugen? Ich habe bei den vielen Letsencrypt-Einleitungen nirgendswo darüber etwas gelesen. Geht das dann wie hier beschrieben:
Mit der ACME Version 2 hänge ich hier:
Ich habe auf Version 1 umgestellt (siehe unten), da geht es schon besser.
Das Verzeichnis /var/www/froxlor/.well-known/acme-challenge ist leer. Ich habe testweise eine index.html dort erstellt. Wenn ich das Verzeichnis http://medienkompetenz.jetzt/.well-known/acme-challange/ öffne erhalte ich, die index.html nicht, auch nicht wenn ich die .htaccess entferne. Daher müsste auch bei der Umleitung noch ein Fehler vorliegen.
Ich habe die Datei /etc/apache2/conf-enabled/acme.conf erstellt:
Hier die Fehler, die bei der Version 1 von ACME aufgetreten sind (beim 2. Versuch unten kam der Fehler, dass ich mich zu oft angemeldet habe. Da muss ich einfach warten)
root@1383561341-1:~# php -q /var/www/froxlor/scripts/froxlor_master_cronjob.php --letsencrypt --debug [information] Updating Let's Encrypt certificates [information] Updating medienbrief.schule [information] Adding SAN entry: medienbrief.schule [information] Adding SAN entry: www.medienbrief.schule [information] letsencrypt Using 'https://acme-v01.api.letsencrypt.org' to generate certificate [information] letsencrypt Using existing account key [information] letsencrypt Starting certificate generation process for domains [information] letsencrypt Requesting challenge for medienbrief.schule [information] letsencrypt Sending signed request to /acme/new-authz [information] letsencrypt Got challenge token for medienbrief.schule [information] letsencrypt Token for medienbrief.schule saved at /var/www/froxlor/.well-known/acme-challenge/123456 and should be available at http://medienbrief.schule/.well-known/acme-challenge/123456 [warning] [Lets Encrypt self-check] Please check http://medienbrief.schule/.well-known/acme-challenge/123456 - token seems to be not available. This is just a simple self-check, it might be wrong but consider using this information when Let's Encrypt fails to issue a certificate [information] letsencrypt Sending request to challenge [information] letsencrypt Sending signed request to https://acme-v01.api.letsencrypt.org/acme/challenge/667788/7890 [information] letsencrypt Verification pending, sleeping 1s [error] Could not get Let's Encrypt certificate for medienbrief.schule: Verification ended with error: {"identifier":{"type":"dns","value":"medienbrief.schule"},"status":"invalid","expires":"2018-06-13T07:56:31Z","challenges":[{"type":"dns-01","status":"invalid","uri":"https:\/\/acme-v01.api.letsencrypt.org\/acme\/challenge\/667788\/6789","token":"zui123"},{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:unauthorized","detail":"Invalid response from http:\/\/medienbrief.schule\/.well-known\/acme-challenge\/123456: \"<!DOCTYPE html>\n<!--[if IE 7]>\n<html class=\"ie ie7\" lang=\"de-DE\" prefix=\"og: http:\/\/ogp.me\/ns#\">\n<![endif]-->\n<!--[if IE 8]>\n<ht\"","status":403},"uri":"https:\/\/acme-v01.api.letsencrypt.org\/acme\/challenge\/667788\/7890","token":"123456","keyAuthorization":"123456.abcdef","validationRecord":[{"url":"http:\/\/medienbrief.schule\/.well-known\/acme-challenge\/123456","hostname":"medienbrief.schule","port":"80","addressesResolved":["109.75.177.194"],"addressUsed":"109.75.177.194"}]}],"combinations":[[0],[1]]} [information] Updating medienkompetenz.jetzt [information] Adding SAN entry: medienkompetenz.jetzt [information] Adding SAN entry: www.medienkompetenz.jetzt [information] letsencrypt Using 'https://acme-v01.api.letsencrypt.org' to generate certificate [information] letsencrypt Using existing account key [information] letsencrypt Starting certificate generation process for domains [information] letsencrypt Requesting challenge for medienkompetenz.jetzt [information] letsencrypt Sending signed request to /acme/new-authz [information] letsencrypt Got challenge token for medienkompetenz.jetzt [information] letsencrypt Token for medienkompetenz.jetzt saved at /var/www/froxlor/.well-known/acme-challenge/fedcba and should be available at http://medienkompetenz.jetzt/.well-known/acme-challenge/fedcba [warning] [Lets Encrypt self-check] Please check http://medienkompetenz.jetzt/.well-known/acme-challenge/fedcba - token seems to be not available. This is just a simple self-check, it might be wrong but consider using this information when Let's Encrypt fails to issue a certificate [information] letsencrypt Sending request to challenge [information] letsencrypt Sending signed request to https://acme-v01.api.letsencrypt.org/acme/challenge/zuiop/44553322 [information] letsencrypt Verification pending, sleeping 1s [error] Could not get Let's Encrypt certificate for medienkompetenz.jetzt: Verification ended with error: {"identifier":{"type":"dns","value":"medienkompetenz.jetzt"},"status":"invalid","expires":"2018-06-13T07:56:35Z","challenges":[{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:unauthorized","detail":"Invalid response from http:\/\/medienkompetenz.jetzt\/.well-known\/acme-challenge\/fedcba: \"<!DOCTYPE html>\n<!--[if IE 7]>\n<html class=\"ie ie7\" lang=\"de-DE\">\n<![endif]-->\n<!--[if IE 8]>\n<html class=\"ie ie8\" lang=\"de-DE\">\"","status":403},"uri":"https:\/\/acme-v01.api.letsencrypt.org\/acme\/challenge\/zuiop\/44553322","token":"fedcba","keyAuthorization":"fedcba.abcdef","validationRecord":[{"url":"http:\/\/medienkompetenz.jetzt\/.well-known\/acme-challenge\/fedcba","hostname":"medienkompetenz.jetzt","port":"80","addressesResolved":["109.75.177.194"],"addressUsed":"109.75.177.194"}]},{"type":"dns-01","status":"invalid","uri":"https:\/\/acme-v01.api.letsencrypt.org\/acme\/challenge\/zuiop\/56789","token":"def01234"}],"combinations":[[1],[0]]} [information] Let's Encrypt certificates have been updated [notice] Checking system's last guid You have new mail in /var/mail/root root@1383561341-1:~# php -q /var/www/froxlor/scripts/froxlor_master_cronjob.php --letsencrypt --debug [information] Updating Let's Encrypt certificates [information] Updating medienbrief.schule [information] Adding SAN entry: medienbrief.schule [information] Adding SAN entry: www.medienbrief.schule [information] letsencrypt Using 'https://acme-v01.api.letsencrypt.org' to generate certificate [information] letsencrypt Using existing account key [information] letsencrypt Starting certificate generation process for domains [information] letsencrypt Requesting challenge for medienbrief.schule [information] letsencrypt Sending signed request to /acme/new-authz [error] Could not get Let's Encrypt certificate for medienbrief.schule: No challenges received for medienbrief.schule. Whole response: {"type":"urn:acme:error:rateLimited","detail":"Error creating new authz :: too many failed authorizations recently: see https:\/\/letsencrypt.org\/docs\/rate-limits\/","status":429} [information] Updating medienkompetenz.jetzt [information] Adding SAN entry: medienkompetenz.jetzt [information] Adding SAN entry: www.medienkompetenz.jetzt [information] letsencrypt Using 'https://acme-v01.api.letsencrypt.org' to generate certificate [information] letsencrypt Using existing account key [information] letsencrypt Starting certificate generation process for domains [information] letsencrypt Requesting challenge for medienkompetenz.jetzt [information] letsencrypt Sending signed request to /acme/new-authz [error] Could not get Let's Encrypt certificate for medienkompetenz.jetzt: No challenges received for medienkompetenz.jetzt. Whole response: {"type":"urn:acme:error:rateLimited","detail":"Error creating new authz :: too many failed authorizations recently: see https:\/\/letsencrypt.org\/docs\/rate-limits\/","status":429} [information] Let's Encrypt certificates have been updated [notice] Checking system's last guidLink to comment
Share on other sites
13 answers to this question
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now