acme.sh is now using zerossl, change it to letsencrypt CA server

[Sandeep]

Since today we've many ticket regarding autossl is failing, this is due to acme client changed the default CA to zerossl to change back to letsencrypt run the below command as root

Code Select Expand

/root/.acme.sh/acme.sh --set-default-ca  --server  letsencrypt

and then issue the certs

this is temporary until we fix it in core cwp and push the update

[narin]

thanks Sandeep.

[joaomach]

That worked, thank you!

[Biswashost]

Thank you so much. I was faces same issue after this changes from Let's encrypt.

[josephgodwinke]

finally...hope this gets fixed.

[kads]

Well done guys - nice fix - thank you 

[fysioski]

Since today we've many ticket regarding autossl is failing, this is due to acme client changed the default CA to zerossl to change back to letsencrypt run the below command as root

Code Select Expand

/root/.acme.sh/acme.sh --set-default-ca  --server  letsencrypt

and then issue the certs

this is temporary until we fix it in core cwp and push the update

After this command NginX  wont startup again. Can you please help with a fix?

[Sandeep]

Since today we've many ticket regarding autossl is failing, this is due to acme client changed the default CA to zerossl to change back to letsencrypt run the below command as root

Code Select Expand

/root/.acme.sh/acme.sh --set-default-ca  --server  letsencrypt

and then issue the certs

this is temporary until we fix it in core cwp and push the update

After this command NginX  wont startup again. Can you please help with a fix?

and mine server is crashed and whole data center burned out

this is not related to anything with nginx this command even don't do anything to nginx. Please check the nginx service status and log why it is stopped.

[fysioski]

Try it for yourself and see. It is related to let's encrypt

[Sandeep]

Try it for yourself and see. It is related to let's encrypt

we've already tested and provided the solution, whats in nginx error log ?

[norberto]

you recognize that the problem is with cwp and when the customer opens a call you say that we have to pay for support, this needs to be improved.

[fysioski]

Try it for yourself and see. It is related to let's encrypt

we've already tested and provided the solution, whats in nginx error log ?

I uninstalled nginx as all sites where dead. So I dont have any log anymore. It just said nginx was not running and could not be restarted. So please provide us with the solution please?

[fysioski]

Try it for yourself and see. It is related to let's encrypt

we've already tested and provided the solution, whats in nginx error log ?

-- Unit nginx.service has begun starting up.
Jun 18 07:24:55 wp04.refreshserver.nl nginx[301557]: nginx: [emerg] SSL_CTX_set_cipher_list("EECDH~~@@~~ECDSA~~@@~~AESGCM:EECDH~~@@~~aRSA~~@@~~AESGCM:EECDH~~@@~~ECDSA~~@@~~SHA384:EECDH~~@@~~ECDSA~~@@~~SHA256:EECDH~~@@~~aRSA~~@@~~SHA384:EECDH~~@@~~aRSA~~@@~~SHA256:EECDH~~@@~~aRSA!RC4:EECDH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS") failed (SSL: error:140E6118:SSL routines:ssl_cipher_process_rulestr:invalid command error:140E6118:SSL routines:ssl_cipher_process_rulestr:invalid command error:140E6118:SSL routines:ssl_cipher_process_rulestr:invalid command error:140E6118:SSL routines:ssl_cipher_process_rulestr:invalid command error:140E6118:SSL routines:ssl_cipher_process_rulestr:invalid command error:140E6118:SSL routines:ssl_cipher_process_rulestr:invalid command error:140E6118:SSL routines:ssl_cipher_process_rulestr:invalid command)
Jun 18 07:24:55 wp04.refreshserver.nl nginx[301557]: nginx: configuration file /etc/nginx/nginx.conf test failed
Jun 18 07:24:55 wp04.refreshserver.nl systemd[1]: nginx.service: Control process exited, code=exited status=1
Jun 18 07:24:55 wp04.refreshserver.nl systemd[1]: nginx.service: Failed with result 'exit-code'.
-- Subject: Unit failed
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
--
-- The unit nginx.service has entered the 'failed' state with result 'exit-code'.
Jun 18 07:24:55 wp04.refreshserver.nl systemd[1]: Failed to start The nginx HTTP and reverse proxy server.
-- Subject: Unit nginx.service has failed
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
--
-- Unit nginx.service has failed.
--
-- The result is failed.

[Sandeep]

you've malformed vhost probably you're using custom template. If yes recreate those template

[fysioski]

you've malformed vhost probably you're using custom template. If yes recreate those template

Hi, we did not but is there a way to set default? So we can test?