Peer's Certificate issuer is not recognized

idflorin

I use access URL to run cron on one website.
When I execute task I get this error:
`----------------------------------------------------------------------------
curl: (60) Peer's Certificate issuer is not recognized.
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use

the -k (or --insecure) option.

★[2021-01-24 22:51:39] Successful
------------------------------------------------------------`

Even it say Successful , cron was not run

idflorin

This appeared about 5 days ago.
I use Centos 7 with aapanel 6.8.7

idflorin

Now, I tried to renew domain3.com certificate and I get this errors:

`
2021/01/26 22:18:46 [error] 4664#0: *10531 open() "/www/wwwroot/domain3.com/web/.well-known/acme-challenge/9cMo5TMSgiCC46YYgWAeWlaiRGMmiNHgxS9g0v4uU8U" failed (2: No such file or directory), client: 18.196.96.172, server: domain3.com, request: "GET /.well-known/acme-challenge/9cMo5TMSgiCC46YYgWAeWlaiRGMmiNHgxS9g0v4uU8U HTTP/1.1", host: "domain3.com", referrer: "http://domain3.com/.well-known/acme-challenge/9cMo5TMSgiCC46YYgWAeWlaiRGMmiNHgxS9g0v4uU8U"

2021/01/26 22:18:47 [error] 4664#0: *10535 open() "/www/wwwroot/domain3.com/web/.well-known/acme-challenge/9cMo5TMSgiCC46YYgWAeWlaiRGMmiNHgxS9g0v4uU8U" failed (2: No such file or directory), client: 3.22.70.135, server: domain3.com, request: "GET /.well-known/acme-challenge/9cMo5TMSgiCC46YYgWAeWlaiRGMmiNHgxS9g0v4uU8U HTTP/1.1", host: "domain3.com", referrer: "http://domain3.com/.well-known/acme-challenge/9cMo5TMSgiCC46YYgWAeWlaiRGMmiNHgxS9g0v4uU8U"

2021/01/26 22:18:47 [error] 4663#0: *10536 open() "/www/wwwroot/domain3.com/web/.well-known/acme-challenge/9cMo5TMSgiCC46YYgWAeWlaiRGMmiNHgxS9g0v4uU8U" failed (2: No such file or directory), client: 66.133.109.36, server: domain3.com, request: "GET /.well-known/acme-challenge/9cMo5TMSgiCC46YYgWAeWlaiRGMmiNHgxS9g0v4uU8U HTTP/1.1", host: "domain3.com", referrer: "http://domain3.com/.well-known/acme-challenge/9cMo5TMSgiCC46YYgWAeWlaiRGMmiNHgxS9g0v4uU8U"

2021/01/26 22:18:47 [error] 4664#0: *10541 open() "/www/wwwroot/domain3.com/web/.well-known/acme-challenge/PryCOq4MlBs2w5bEM9A-uys6rz8ujDMckBsxB3_ni5w" failed (2: No such file or directory), client: 18.196.96.172, server: domain3.com, request: "GET /.well-known/acme-challenge/PryCOq4MlBs2w5bEM9A-uys6rz8ujDMckBsxB3_ni5w HTTP/1.1", host: "www.domain3.com", referrer: "http://www.domain3.com/.well-known/acme-challenge/PryCOq4MlBs2w5bEM9A-uys6rz8ujDMckBsxB3_ni5w"

2021/01/26 22:18:48 [error] 4663#0: *10545 open() "/www/wwwroot/domain3.com/web/.well-known/acme-challenge/PryCOq4MlBs2w5bEM9A-uys6rz8ujDMckBsxB3_ni5w" failed (2: No such file or directory), client: 3.22.70.135, server: domain3.com, request: "GET /.well-known/acme-challenge/PryCOq4MlBs2w5bEM9A-uys6rz8ujDMckBsxB3_ni5w HTTP/1.1", host: "www.domain3.com", referrer: "http://www.domain3.com/.well-known/acme-challenge/PryCOq4MlBs2w5bEM9A-uys6rz8ujDMckBsxB3_ni5w"

2021/01/26 22:18:48 [error] 4663#0: *10546 open() "/www/wwwroot/domain3.com/web/.well-known/acme-challenge/PryCOq4MlBs2w5bEM9A-uys6rz8ujDMckBsxB3_ni5w" failed (2: No such file or directory), client: 66.133.109.36, server: domain3.com, request: "GET /.well-known/acme-challenge/PryCOq4MlBs2w5bEM9A-uys6rz8ujDMckBsxB3_ni5w HTTP/1.1", host: "www.domain3.com", referrer: "http://www.domain3.com/.well-known/acme-challenge/PryCOq4MlBs2w5bEM9A-uys6rz8ujDMckBsxB3_ni5w"
`
any ideas?

ganteng

I assume you are running nginx and maybe a web framework has override the settings.
please add following lines to your website config :
location ~ /.well-known {
allow all;
root "/www/wwwroot/domain3.com/web;
}

idflorin

ganteng thanks but don't work for me.
btw, domain2.com is almost identical (the same drupal 8 cms) with domain3.com and renew works for domain2.com.
I will try to delete domain3.com and the SSL certificate but I don't check to delete "FTP, database and root directory " and I recreate the domain3.com.
I'll be back...

idflorin

I made a backup, deleted the domain+ftp+db (I didn't touch the email server).... etc and recreated the domain.
All seems fine
Thanks.