ACME_NEED_RENEW ACME_RENEWING |-Creating order.. |-Getting verification information.. |-Verify the dir：/www/wwwroot/xxxxxx.com/.well-known/acme-challenge |-('ACEM_AUTH_ERR', ({'type': 'urn:ietf:params:acme:error:rateLimited', 'detail': "Rate limit for '/acme' reached"},)) ---------------------------------------------------------------------- ACME_RENEWING |-Creating order.. |-The account has more than 5 failed orders within 1 hour, please wait 1 hour and try again! if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); }

hklcf Hello, you have failed more than 5 times in one hour. Please wait patiently for one hour and try again.

/usr/lib64/python2.7/site-packages/cryptography/__init__.py:39: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in a future release. CryptographyDeprecationWarning, ACME_NEED_RENEW ACME_RENEWING |-Creating order.. |-'replay-nonce' ---------------------------------------------------------------------- ---------------------------------------------------------------------------- ★[2021-05-12 00:10:04] Successful ---------------------------------------------------------------------------- if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); }

solution remove the Renew Let's Encrypt Certificate cron job, wait aapanel auto regen the new Renew Let's Encrypt Certificate cron job

I found DeprecationWarning in cron log ACME_NEED_RENEW ACME_RENEWING |-Creating order.. |-Getting verification information.. |-Verification type: dns-01 |-Verification type: dns-01 |-Verifying domain name.. |-Attempt to verify DNS records locally, domain name: _acme-challenge.xxxx.com, type: TXT record value: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx /www/server/panel/class/acme_v2.py:905: DeprecationWarning: please use dns.resolver.resolve() instead ns = dns.resolver.query(domain, s_type) if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); }

hklcf Has your problem been solved? I just tested that the renewal works fine if still have issues, try to execute this command and show me the result. /www/server/panel/pyenv/bin/python -u /www/server/panel/class/acme_v2.py

I know that it is a old topic, but I want to share my solution. go to website > yourdomain > SSL > certificate holder > del the old certificate mail server > SSL > delete old ssl website > domain manager > add your-domain.com and *.your-domain.com website > SSL > DNS verification > Select All > apply website > domain manager > put your old domains (you can delete *.your-domain.com) mail server > SSL > copy the certificate from -> website > ssl ready!

oh I see why. Cron job didn't work its auto renew. Now were down on production with SSL certificate issue.

Can't generate SSL with wildcard. We need the wildcard any solution? It show this error Traceback (most recent call last): File "/www/server/panel/BTPanel/ init .py", line 1628, in publicObject return run_exec().run(toObject, defs, get) File "/www/server/panel/BTPanel/ init .py", line 1576, in run result = getattr(toObject,get.action)(get) File "class/acme_v2.py", line 1334, in apply_cert_api check_result = self.check_auth_env(args, check=True) File "class/acme_v2.py", line 1426, in check_auth_env raise public.returnMsg(False, 'ACME_PAN_DOMAIN_ERR') TypeError: exceptions must derive from BaseException Were using Debian GNU/Linux 11.

Hi guys, I'm having issues with a site where I am trying to set up SSL. It's pretty important, this site helps organize medication sending to people in need and this web app helps organize it. REQUEST_DATE: 2022-05-04 13:46:24 PAN_VERSION: 6.8.24 OS_VERSION: CentOS 8.5.2111 x86_64(Py3.7.9) REMOTE_ADDR: 82.65.197.99 REQUEST_URI: POST /acme?action=apply_cert_api REQUEST_FORM: {'domains': '["mydomain.com","*.mydomain.com"]', 'auth_type': 'http', 'auth_to': '1', 'auto_wildcard': '0', 'id': '1'} USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36 Traceback (most recent call last): File "/www/server/panel/BTPanel/ init .py", line 1628, in publicObject return run_exec().run(toObject, defs, get) File "/www/server/panel/BTPanel/ init .py", line 1576, in run result = getattr(toObject,get.action)(get) File "class/acme_v2.py", line 1334, in apply_cert_api check_result = self.check_auth_env(args, check=True) File "class/acme_v2.py", line 1426, in check_auth_env raise public.returnMsg(False, 'ACME_PAN_DOMAIN_ERR') TypeError: exceptions must derive from BaseException

Can't Renew Let's Encrypt Certificate

aaPanel_Kern

rochendil
Hello, your site uses redirect 302, which cannot be verified by file method. You can use DNS method to verify. Please go to the domain name provider to set the DNS settings.

rochendil

aaPanel_Kern
Domain name ["pandevida-medicamentos.com - the domain's nameservers may be malfunctioning"] is currently required to verify the CAA record, please parse the CAA record manually, or retry the application after 1 hour!
Verify domain name:pandevida-medicamentos.com

Verify record:_acme-challenge.pandevida-medicamentos.com

Verify content:Ks5y_S2C_j9uny4fn1QQ36d9d7caS6KYvJ9gpaxZH2E

Error code😃NS problem: SERVFAIL looking up CAA for pandevida-medicamentos.com - the domain's nameservers may be malfunctioning

Verify results: Verify failed

rochendil

aaPanel_Kern

You're not going to believe this, I have a new SSL problem on a different server.
Aapanel just stopped renewing SSL, same problem as before. BUT this time it's a different cause.

https://youtu.be/FSxPDJgYPqc
It renews the SSL certificate but doesn't deploy it or save it.
Any way to fix this?
I tried to update Aapanel, fix it, restart the panel.

rochendil

I fixed it by entering the txt for @ and www. and then it worked for both.

It wouldn't work for the regular domain name by itself.
Thank you for the help.

aaPanel_Kern

rochendil
Hello, click "Other certificate" to have a certificate?

rochendil

aaPanel_Kern

It is empty

aaPanel_Kern

rochendil
This is caused by not installing normal pyOpenSSL. Is it possible to execute the command to install once?
btpip install --upgrade pyOpenSSL bt reload

Yamiraan

@rochendil
Hello, try executing the following command in the ssh tool:
btpip install --upgrade pyOpenSSL
bt reload

rochendil

I had to use
/www/server/panel/pyenv/bin/python3.7 -m pip install --upgrade pip
And then
bt reload

Thank you guys.

« Previous Page