16 Oct
2020
16 Oct
'20
1:42 p.m.
My brain hurts.
A domain failed to renew Let’s Encrypt today on Centos 7 running Virtualmin.
No sign of .well-known directory under public_html.
Had a look on all 4 VPS on Centos 7 and Centos 8 (two with Bitfolk, two overseas) and none
of the sites I checked have a .well-known directory any more!
Anyone seen this, or can offer a clue?
Kind regards,
Hugh
16 Oct
16 Oct
1:49 p.m.
On Fri, Oct 16, 2020 at 02:42:26PM +0100, Hugh Frostick wrote:
A domain failed to renew Let’s Encrypt today on Centos 7 running Virtualmin.
No sign of .well-known directory under public_html.
It's been a while since I used Virtualmin, but are you sure there's a
real .well_known directory? It might be caught and redirected by an
apache2 setting. I have a vague memory of this.
--
Anahata
anahata(a)treewind.co.uk -+- http://www.treewind.co.uk
Home: 01535 501017 Mob: 07976 263827
4:07 p.m.
Hi,
On 16/10/2020 14:42, Hugh Frostick wrote:
My brain hurts.
A domain failed to renew Let’s Encrypt today on Centos 7 running
Virtualmin.
No sign of .well-known directory under public_html.
Had a look on all 4 VPS on Centos 7 and Centos 8 (two with Bitfolk,
two overseas) and none of the sites I checked have a .well-known
directory any more!
Anyone seen this, or can offer a clue?
Isn't this directory created by certbot and therefore probably deleted
by it when the challenge has completed? Does the user ID that certbot is
being run under have write permission in the public_html directory? If
not, it won't be able to create the .well_known folder.
All the best,
Paul.
4:43 p.m.
On 16/10/2020 14:42, Hugh Frostick wrote:
My brain hurts.
A domain failed to renew Let’s Encrypt today on Centos 7 running Virtualmin.
No sign of .well-known directory under public_html.
Had a look on all 4 VPS on Centos 7 and Centos 8 (two with Bitfolk, two overseas) and none
of the sites I checked have a .well-known directory any more!
Anyone seen this, or can offer a clue?
Isn't this directory created by certbot and
therefore probably deleted by it when the challenge has completed? Does the user ID that
certbot is being run under have write permission in the public_html directory? If not, it
won't be able to create the .well_known folder.
Hi Paul
The things is some of those domains have been there for many months and auto-renewed
numerous times successfully.
The .well-known directory is not exclusive to certbot so I am sure that should not be
fiddling with it.
For the example that failed this morning I had to manually create the
.well-known/acme-challenge directory for it to work.
Something has changed in certbot/centos/virtualmin I suppose but Google ain't helping
me.
Guess I just need to set up those directories before next renewal crops up. Naturally,
don’t like and can do without mysteries like this however!
Hugh
4:54 p.m.
On 16/10/2020 17:43, Hugh Frostick wrote:
The .well-known directory is not exclusive to certbot
so I am sure that should not be fiddling with it.
Hi Hugh.
FWIW my Debian systems have this sort of thing in the Apache config:
# Letsencrypt/acme challenges directory
Alias /.well-known/acme-challenge /var/www/challenges
5:25 p.m.
On Fri, Oct 16, 2020 at 05:43:02PM +0100, Hugh Frostick wrote:
The .well-known directory is not exclusive to certbot
so I am sure
that should not be fiddling with it.
It shouldn't do any harm, though, to make sure it's writeable by the
certbot process.
Something has changed in certbot/centos/virtualmin I
suppose but
Google ain't helping me.
I take it you've tried the Virtualmin support (users) forum?
--
Anahata
anahata(a)treewind.co.uk -+- http://www.treewind.co.uk
Home: 01535 501017 Mob: 07976 263827
17 Oct
17 Oct
5:50 p.m.
On Fri, Oct 16, 2020 at 05:43:02PM +0100, Hugh Frostick wrote:
No - I was asking
here first, in case anyone else has seen the same. Have now posted on Virtualmin forum.
But I have just manually renewed another domain - no problems, and no directory created?
So it looks like the method has changed.
The Virtualmin screen wording says "This is done by placing a small temporary file
under the website's document directory /home/<domain>/public_html." But not
sure if that is the same as it used to be.
It seems there was maybe some other issue with the renewal I had problems with yesterday,
but I did see a temp file appearing in acme-challenge. Maybe it now clears up afterwards.
No energy to look further at the moment!
Cheers
Hugh
The .well-known directory is not exclusive to
certbot so I am sure
that should not be fiddling with it.
It shouldn't do any harm, though, to make sure it's writeable by the
certbot process.
Something has changed in
certbot/centos/virtualmin I suppose but
Google ain't helping me.
I take it you've tried the Virtualmin support (users) forum?
1296
days inactive
1297
days old
6 comments
4 participants
participants (4)
-
Anahata -
Dom Latter -
Hugh Frostick -
Paul Stimpson