Killed my Lighttpd Topic is solved

Having issues with your DietPi installation or found a bug? Post it here.
GreenGentleman
Posts: 31
Joined: Mon Nov 09, 2020 4:10 pm

Re: Killed my Lighttpd

Post by GreenGentleman »

Yeah, it looks like 5/week. Not unreasonable, but for a noob like me it's a probem now :( I can't use https for a week now. Well, I just hope I can fix it next sunday! :)
User avatar
Joulinar
Posts: 4203
Joined: Sat Nov 16, 2019 12:49 am

Re: Killed my Lighttpd

Post by Joulinar »

are you sure it's 5/week only? :?

If you have a backup, probably you are able to copy certificate files back
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
GreenGentleman
Posts: 31
Joined: Mon Nov 09, 2020 4:10 pm

Re: Killed my Lighttpd

Post by GreenGentleman »

Renewals are treated specially: they don’t count against your Certificates per Registered Domain limit, but they are subject to a Duplicate Certificate limit of 5 per week.
Sadly, I don't have backups of the certificates. There are a few files in /etc/letsencrypt/keys (00xx_key-certbot.pem), but I'm not sure if I can use them.
User avatar
Joulinar
Posts: 4203
Joined: Sat Nov 16, 2019 12:49 am

Re: Killed my Lighttpd

Post by Joulinar »

just give it try tomorrow again ;)
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
GreenGentleman
Posts: 31
Joined: Mon Nov 09, 2020 4:10 pm

Re: Killed my Lighttpd

Post by GreenGentleman »

It really took a week! Had to take down external access to my cloud in the meantime, but now I could request one more certificate (only to be blocked again on my next request... I hope I can try again later today!)

I got an error:

Code: Select all

[  OK  ] DietPi-LetsEncrypt | Lighttpd webserver detected
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Obtaining a new certificate
live directory exists for MY_DOMAIN
[FAILED] Certbot failed with error code (1), please check its terminal output. Aborting...
[ SUB1 ] DietPi-Services > restart
[  OK  ] DietPi-Services | occ maintenance:mode --on
[  OK  ] DietPi-Services | restart : redis-server
[  OK  ] DietPi-Services | restart : mariadb
[  OK  ] DietPi-Services | restart : php7.3-fpm
[..    ] DietPi-Services | lighttpd


Looking at the installed certificates:

Code: Select all

root@DietPi:~# certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Renewal configuration file /etc/letsencrypt/renewal/MY_DOMAIN.conf produced an unexpected error: renewal config file {} is missing a required file reference. Skipping.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

The following renewal configurations were invalid:
  /etc/letsencrypt/renewal/MY_DOMAIN.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
User avatar
Joulinar
Posts: 4203
Joined: Sat Nov 16, 2019 12:49 am

Re: Killed my Lighttpd

Post by Joulinar »

I guess you would need to clean all the old config files to get a fresh SSL config
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
GreenGentleman
Posts: 31
Joined: Mon Nov 09, 2020 4:10 pm

Re: Killed my Lighttpd

Post by GreenGentleman »

I guess you would need to clean all the old config files to get a fresh SSL config
Can you tell me where they're stored? I'd like to use Dietpi-Letsencrypt again, but since it always requests a certificate, even if it fails later, I'm probably gonna run out of trys before I get it working if I do it alone again.
User avatar
Joulinar
Posts: 4203
Joined: Sat Nov 16, 2019 12:49 am

Re: Killed my Lighttpd

Post by Joulinar »

usually files should be located on /etc/letsencrypt/
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
GreenGentleman
Posts: 31
Joined: Mon Nov 09, 2020 4:10 pm

Re: Killed my Lighttpd

Post by GreenGentleman »

Code: Select all

root@DietPi:/etc/letsencrypt# ls
accounts  archive  cli.ini  csr  keys  live  renewal  renewal-hooks
Could I just nuke it all, since I get a new certificate anyway?
User avatar
Joulinar
Posts: 4203
Joined: Sat Nov 16, 2019 12:49 am

Re: Killed my Lighttpd

Post by Joulinar »

have a look into the folder and remove what is pointing to the old domain
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
Post Reply