Error on create or renew SSL certificates after upgrade

sifyuyuspi

Printscreen / screenshot
!<

REQUEST_DATE: 2022-11-16 15:46:59
 PAN_VERSION: 6.8.26
  OS_VERSION: Ubuntu 20.04 LTS x86_64(Py3.7.8)
 REMOTE_ADDR: 172.71.10.33
 REQUEST_URI: POST /acme?action=apply_cert_api
REQUEST_FORM: {'domains': '["www.clinos.com.br","clinos.com.br"]', 'auth_type': 'http', 'auth_to': '150', 'auto_wildcard': '0', 'id': '150'}
  USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36

Traceback (most recent call last):
  File "class/acme_v2.py", line 34, in 
    import OpenSSL
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/OpenSSL/__init__.py", line 8, in 
    from OpenSSL import crypto, SSL
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/OpenSSL/crypto.py", line 1517, in 
    class X509StoreFlags(object):
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/OpenSSL/crypto.py", line 1537, in X509StoreFlags
    CB_ISSUER_CHECK = _lib.X509_V_FLAG_CB_ISSUER_CHECK
AttributeError: module 'lib' has no attribute 'X509_V_FLAG_CB_ISSUER_CHECK'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/flask/app.py", line 2447, in wsgi_app
    response = self.full_dispatch_request()
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/flask/app.py", line 1952, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/flask/app.py", line 1821, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/flask/_compat.py", line 39, in reraise
    raise value
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/flask/app.py", line 1950, in full_dispatch_request
    rv = self.dispatch_request()
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/flask/app.py", line 1936, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/www/server/panel/BTPanel/__init__.py", line 429, in acme
    import acme_v2
  File "class/acme_v2.py", line 37, in 
    import OpenSSL
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/OpenSSL/__init__.py", line 8, in 
    from OpenSSL import crypto, SSL
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/OpenSSL/crypto.py", line 1517, in 
    class X509StoreFlags(object):
  File "/www/server/panel/pyenv/lib/python3.7/site-packages/OpenSSL/crypto.py", line 1537, in X509StoreFlags
    CB_ISSUER_CHECK = _lib.X509_V_FLAG_CB_ISSUER_CHECK
AttributeError: module 'lib' has no attribute 'X509_V_FLAG_CB_ISSUER_CHECK'
```

>!Screenshot
[upl-image-preview url=https://www.aapanel.com/forum/assets/files/2022-11-16/1668624874-10934-image.png]
!<

```
During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "class/acme_v2.py", line 1909, in renew_cert
    self._config['orders'][index]['auth_to'], index)
  File "class/acme_v2.py", line 1773, in renew_cert_to
    siteName = self.get_site_name_by_domains(domains)
AttributeError: 'acme_v2' object has no attribute 'get_site_name_by_domains'
```

aaPanel_Kern

sifyuyuspi
hi,
Use the SSH tool to log in to the server to execute the command to update the pyopensl. Don't use the terminal of the panel
btpip install --upgrade pyOpenSSL bt reload

If it is still not good, use the SSH tool to log in to the server to execute the command cover. Only replace the AAPANEL username and password. Don't use the terminal of the panel

mv /www/server/panel/pyenv /www/server/panel/pyenv_

Centos :
yum install -y wget && wget -O install.sh http://www.aapanel.com/script/install_6.0_en.sh && bash install.sh aapanel

Ubuntu/Deepin :
wget -O install.sh http://www.aapanel.com/script/install-ubuntu_6.0_en.sh && sudo bash install.sh aapanel

Debian :
wget -O install.sh http://www.aapanel.com/script/install-ubuntu_6.0_en.sh && bash install.sh aapanel

steve

aaPanel_Kern will this be fixed in a panel update? Or will I have to reinstall aapanel regardless?

aaPanel_Kern

steve
Hello, won't update repair,
Try to update pyopenssl. If it still fails, overwrite the installation. Overriding the installation will not lose data, but only change the aapanel user name and password.

Kawula

aaPanel_Kern

i got error like this
after run

btpip install --upgrade pyOpenSSL

after that the ssl update has not been successful

aaPanel_Kern

Kawula
Hello, what does your error show? Is the same error X509_V_FLAG_CB_ISSUER_CHECK?
If yes please try this:
mv /www/server/panel/pyenv/lib/python3.7/site-packages/OpenSSL /tmp/OpenSSL_bak btpip install pyOpenSSL bt reload

Kawula

aaPanel_Kern

Renew SSL

finally I disabled SSL, then made a new one.

thanks work for me,

aaPanel_Kern

aaP_jamidarboleda

Hello, the solution to this problem is very easy, please turn off the ssl and disable all certificate, and turn off the ssl, after remove this folder .well-known/acme-challenge and run
mv /www/server/panel/pyenv/lib/python3.7/site-packages/OpenSSL /tmp/OpenSSL_bak
btpip install pyOpenSSL
bt reload

Againg try to install the cerificate and the errors will be fixed

Thanks