LetsEncrypt not working for hostname

Hi,
The SSL did not renewed for my hostname, and when I tried to change the hostname to regenerate it, it just did a self signed cert.
Your help would be appreciated.

This is the error message I get (I used xxxxxxx for the real domain name here for security):

Code: [Select]

2023/07/25 19:58:04 [error] 12504#0: *1139 FastCGI sent in stderr: "PHP message: PHP Notice:  Undefined offset: 0 in /usr/local/cwpsrv/htdocs/resources/admin/include/functions/func_system.php on line 0" while reading upstream, client: 91.120.105.140, server: localhost, request: "POST /cwp_166d8239a1308e3e7d58dacd0f4bfdc5/admin/index.php?module=change_hostname HTTP/1.1", upstream: "fastcgi://unix:/usr/local/cwp/php71/var/sockets/cwpsrv.sock:", host: "server.xxxxxxxxxxx.com:2031", referrer: "https://server.xxxxxxxxxx.com:2031/cwp_166d8239a1308e3e7d58dacd0f4bfdc5/admin/index.php?module=change_hostname"


Make sue you have port 80 & 443 open.

All you should have to do is goto:

Server Settings -> Change Hostname

Towards the top it should say:
"Your Hostname is: xxx and it resolves to IP: xxx"
rDNS/PTR = (FQDN for your Hostname Here) SUCCESS

If nether of these are green or show correctly, the SSL request will fail.
If they are correct just:

(Click on Big Blue bar that says "Change Hostname")

Nothing needs to be changed.

Thanks for your reply. I know all these and it used ti work fine, but this time when the ssl expired, it did not renew it, and now it only generates a self signed cert when I change the hostname.
Screenshots:
Firewall ports: https://i2.paste.pics/7cc0dc63c9642556f2080104feeb0cc1.png
Hostname: https://i2.paste.pics/77fa9895ba657b24a79b285d14a59175.png

Make sue you have port 80 & 443 open.

All you should have to do is goto:

Server Settings -> Change Hostname

Towards the top it should say:
"Your Hostname is: xxx and it resolves to IP: xxx"
rDNS/PTR = (FQDN for your Hostname Here) SUCCESS

If nether of these are green or show correctly, the SSL request will fail.
If they are correct just:

(Click on Big Blue bar that says "Change Hostname")

Nothing needs to be changed.

On another note, it does not renew any of the SSL certs on any of the hosted domains.

I see you server mentioned a private network also with a 172.x internal IP.

Where is this server hosted at?

Or is it locally behind a modem/router?

If you have it hosted locally, then you will need to contact your provider, as they probably have some things blocked.

I got the issue. So, I manually allowed certain countries in the firewall, and it blocked the rest of them. So it was blocking LetsEncrypt as well, probably US, which wasn't allowd.
Anyhow, thanks for your replies, it's all good now.

I got the issue. So, I manually allowed certain countries in the firewall, and it blocked the rest of them. So it was blocking LetsEncrypt as well, probably US, which wasn't allowd.
Anyhow, thanks for your replies, it's all good now.

Great!

If You care about security, I think cloudflare will help. Allow only port 443 and 80 traffic from Cloudflare and block for the rest.

And also, cloudflare offer free lifetime SSL so don't need to renew any SSL

And also, cloudflare offer free lifetime SSL so don't need to renew any SSL

Cloudflare's SSL is only good for HTTPS requests, port 443, It will not work for you if you are wanting to host mail & FTP. So for many, it's a non-starter if you are trying to run an all-in-one box (web server, mail server, etc.)