Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
1
SSL / Re: Why is autoSSL so flakey?
« on: March 31, 2020, 11:59:21 PM »
I figured out the first order issue. Documenting it here in case it's useful to someone else.
Apparently autoSSL requires that both DOMAIN and www.DOMAIN be A records. If www.DOMAIN is a CNAME pointing to DOMAIN then autoSSL will fail with a variety of unhelpful error messages.
Still wondering where the autoSSL configuration files are, and why it just doesn't use standard LetsEncrypt configuration.
Apparently autoSSL requires that both DOMAIN and www.DOMAIN be A records. If www.DOMAIN is a CNAME pointing to DOMAIN then autoSSL will fail with a variety of unhelpful error messages.
Still wondering where the autoSSL configuration files are, and why it just doesn't use standard LetsEncrypt configuration.
2
SSL / Why is autoSSL so flakey?
« on: March 31, 2020, 11:22:04 PM »
I'm having lots of problems with autoSSL
- can't add a www.DOMAIN to a certificate after creating certificate without it
- errors like "2020-03-31 06:03:12 DNS Redirection problem for DOMAIN with www and without it" when I try to renew
(there is no apparent problem in DNS. The www.DOMAIN is a CNAME for DOMAIN which points to the server address)
I can't find the configuration files for autoSSL to figure out what is going on. It seems to use LetsEncrypt under the covers but the files are not in /etc/letsencrypt.
This seems much more complex than just using LetsEncrypt directly, and having one certificate which includes all host names but the complexity of the way CWP sets up vhosts seems to make this hard. Is something broken on my system or is it autoSSL? Should I just turn off autoSSL altogether and try to use LetsEncrypt directly?
- can't add a www.DOMAIN to a certificate after creating certificate without it
- errors like "2020-03-31 06:03:12 DNS Redirection problem for DOMAIN with www and without it" when I try to renew
(there is no apparent problem in DNS. The www.DOMAIN is a CNAME for DOMAIN which points to the server address)
I can't find the configuration files for autoSSL to figure out what is going on. It seems to use LetsEncrypt under the covers but the files are not in /etc/letsencrypt.
This seems much more complex than just using LetsEncrypt directly, and having one certificate which includes all host names but the complexity of the way CWP sets up vhosts seems to make this hard. Is something broken on my system or is it autoSSL? Should I just turn off autoSSL altogether and try to use LetsEncrypt directly?
3
SSL / Re: AutoSSl for www.example.com
« on: March 31, 2020, 10:59:38 PM »
I have this same problem. For one of my domains I forgot to create the www.DOMAIN alias when I first set it up. Now www.DOMAIN is not included in the certificate for DOMAIN and I can't figure out how to get it to be added. Where are the configuration files for autoSSL stored? It apparently is built on LetsEncrypt but the files are not in /etc/letsencrypt as expected
Pages: [1]
