openmediavault-letsencrypt

  • Ok silly error from my side:


    My nginx configuration was wrong. Should be:



    Thus without acme-challenge directory, otherwise LE did not have permission to create this folder.


    Now it workt to generate certificate.


    thanks.

  • Hallo zusammen,
    leider bekomme ich es nicht hin das Zertifikat zu erstellen. Folgende Fehlermeldung kommt





    Port 80 und 443 im Router sind offen. Meine DynDNS funktioniert nur über Port 443!!! Was kommt mir da in die Quere? (nginx?)
    Ps. Ich habe meine Dyndns abgeändert
    Kann mir jemand helfen?

  • Hello,
    unfortunately, I can not get the certificate. The following error message comes (look at #522)


    Port 80 and 443 in the router are open. My DynDNS only works over port 443 !!! What comes in the way? (Nginx?)
    Ps. I have changed my Dyndns
    Can someone help me?

  • Hello,
    unfortunately, I can not get the certificate. The following error message comes (look at #522)


    Port 80 and 443 in the router are open. My DynDNS only works over port 443 !!! What comes in the way? (Nginx?)
    Ps. I have changed my Dyndns
    Can someone help me?

    Hello, you have to check :
    **if your ddns is registered and known from the Internet (with a dnslookup, dig, etc...)
    **your omv-webgui security settings ("general settings).
    **delete self-signed cert + resetting access to http on 80 works for me.
    I've ddns too, certificat is now created but it doesn't work in firefox (due to a misconfig from my side regarding 'subject alt name')

  • Hello,
    unfortunately, I can not get the certificate. The following error message comes (look at #522)


    Port 80 and 443 in the router are open. My DynDNS only works over port 443 !!! What comes in the way? (Nginx?)
    Ps. I have changed my Dyndns
    Can someone help me?

    Hi,


    i had the same error.


    In my case I used the wrong root path in the lets encrypt plugin.
    After I changed to /var/www/openmediavault it worked without error.

  • Hi all,


    My certificat is working fine at the moment and was created with the plugin. But it is about to expire and I just noticed that the automatic renew process is failing :(


    So I tried to renew it by hand.



    I can see that in the log file:

    Here is the Python version

    Code
    root@home-server:/etc/cron.d# python -V
    Python 2.7.13

    Don't know what to do. Any help would be greatly appreciated.


    Thx



    EDIT:
    After a few research, I found that my certbot package was updated with the one from stretch-backports (v0.23) which need python 3 !
    I don't think that upgraded python to v3.x is a good solution, so I simply want to downgrade the certbot package to the one in the stretch repository (v 0.10).



    I'm a little nervous to "update" all those package ??? Is it safe or am I going to break everything in OMV ?

    Lian Li PC-V354 (with Be Quiet! Silent Wings 3 fans)
    ASRock Rack x470D4U | AMD Ryzen 5 3600 | Crucial 16GB DDR4 2666MHz ECC | Intel x550T2 10Gb NIC

    1 x ADATA 8200 Pro 256MB NVMe for System/Caches/Logs/Downloads
    5 x Western Digital 10To HDD in RAID 6 for Datas
    1 x Western Digital 2To HDD for Backups

    Powered by OMV v5.6.26 & Linux kernel 5.10.x

    4 Mal editiert, zuletzt von sbocquet ()

    • Offizieller Beitrag

    I don't think that upgraded python to v3.x is a good solution, so I simply want to downgrade the certbot package to the one in the stretch repository (v 0.10).

    I pinned the newer certbot package with omv-extras (if backports is enabled - you can disable backports in omv-extras) to allow creation of wild card certs. But installing python 3 is not an upgrade. It is installed side-by-side with python 2. So, it won't hurt to install it. I guess I will have to look at the plugin's dependencies though.

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

  • OK.


    What, for you, is the best move in that case ?


    I still have 13 days before the end of my cert.
    I'm maybe gonna wait a little to wait for you to check the package dependencies.


    Thx @ryecoaaron

    Lian Li PC-V354 (with Be Quiet! Silent Wings 3 fans)
    ASRock Rack x470D4U | AMD Ryzen 5 3600 | Crucial 16GB DDR4 2666MHz ECC | Intel x550T2 10Gb NIC

    1 x ADATA 8200 Pro 256MB NVMe for System/Caches/Logs/Downloads
    5 x Western Digital 10To HDD in RAID 6 for Datas
    1 x Western Digital 2To HDD for Backups

    Powered by OMV v5.6.26 & Linux kernel 5.10.x

    • Offizieller Beitrag

    What, for you, is the best move in that case ?

    What is the output of: dpkg -l | grep python

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

  • Lian Li PC-V354 (with Be Quiet! Silent Wings 3 fans)
    ASRock Rack x470D4U | AMD Ryzen 5 3600 | Crucial 16GB DDR4 2666MHz ECC | Intel x550T2 10Gb NIC

    1 x ADATA 8200 Pro 256MB NVMe for System/Caches/Logs/Downloads
    5 x Western Digital 10To HDD in RAID 6 for Datas
    1 x Western Digital 2To HDD for Backups

    Powered by OMV v5.6.26 & Linux kernel 5.10.x

    • Offizieller Beitrag

    Weird, that should be enough for it to work.

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

  • Are you talking about the install of the new certbot package?

    Lian Li PC-V354 (with Be Quiet! Silent Wings 3 fans)
    ASRock Rack x470D4U | AMD Ryzen 5 3600 | Crucial 16GB DDR4 2666MHz ECC | Intel x550T2 10Gb NIC

    1 x ADATA 8200 Pro 256MB NVMe for System/Caches/Logs/Downloads
    5 x Western Digital 10To HDD in RAID 6 for Datas
    1 x Western Digital 2To HDD for Backups

    Powered by OMV v5.6.26 & Linux kernel 5.10.x

    Einmal editiert, zuletzt von sbocquet ()

    • Offizieller Beitrag

    Are you talking about the installé of the new certbot package?

    Yes, you have the requirements needed for the certbot 0.23 package.

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

  • I pinned the newer certbot package with omv-extras (if backports is enabled - you can disable backports in omv-extras) to allow creation of wild card certs. But installing python 3 is not an upgrade. It is installed side-by-side with python 2. So, it won't hurt to install it. I guess I will have to look at the plugin's dependencies though.


    Unfortunatly, I can't see it… with or without backports enabled


    Code
    root@home-server:/etc/apt/sources.list.d# cat omv-extras-org.list
    # This is file is generated.
    # OMV-Extras repos
    #
    # OMV-Extras.org
    deb https://dl.bintray.com/openmediavault-plugin-developers/arrakis stretch main


    Lian Li PC-V354 (with Be Quiet! Silent Wings 3 fans)
    ASRock Rack x470D4U | AMD Ryzen 5 3600 | Crucial 16GB DDR4 2666MHz ECC | Intel x550T2 10Gb NIC

    1 x ADATA 8200 Pro 256MB NVMe for System/Caches/Logs/Downloads
    5 x Western Digital 10To HDD in RAID 6 for Datas
    1 x Western Digital 2To HDD for Backups

    Powered by OMV v5.6.26 & Linux kernel 5.10.x

    • Offizieller Beitrag

    Unfortunatly, I can't see it…

    See what? The pinning isn't in the repo file. And the new certbot package isn't in the omv-extras repo. What is the output of: apt-cache policy certbot

    omv 7.0.4-2 sandworm | 64 bit | 6.5 proxmox kernel

    plugins :: omvextrasorg 7.0 | kvm 7.0.10 | compose 7.1.2 | k8s 7.0-6 | cputemp 7.0 | mergerfs 7.0.3


    omv-extras.org plugins source code and issue tracker - github


    Please try ctrl-shift-R and read this before posting a question.

    Please put your OMV system details in your signature.
    Please don't PM for support... Too many PMs!

  • I was thinking it was ;)


    Code
    root@home-server:/etc/apt/sources.list.d# apt-cache policy certbot
    certbot:
      Installé : 0.23.0-1~bpo9+1
      Candidat : 0.23.0-1~bpo9+1
     Table de version :
     *** 0.23.0-1~bpo9+1 100
            100 /var/lib/dpkg/status
         0.10.2-1 500
            500 http://ftp.fr.debian.org/debian stretch/main amd64 Packages

    Lian Li PC-V354 (with Be Quiet! Silent Wings 3 fans)
    ASRock Rack x470D4U | AMD Ryzen 5 3600 | Crucial 16GB DDR4 2666MHz ECC | Intel x550T2 10Gb NIC

    1 x ADATA 8200 Pro 256MB NVMe for System/Caches/Logs/Downloads
    5 x Western Digital 10To HDD in RAID 6 for Datas
    1 x Western Digital 2To HDD for Backups

    Powered by OMV v5.6.26 & Linux kernel 5.10.x

  • I think i had a similar error??
    As iam right?


  • Yes, it seems to be the same except that you're running python 2.7...


    and me python 3.0

    Lian Li PC-V354 (with Be Quiet! Silent Wings 3 fans)
    ASRock Rack x470D4U | AMD Ryzen 5 3600 | Crucial 16GB DDR4 2666MHz ECC | Intel x550T2 10Gb NIC

    1 x ADATA 8200 Pro 256MB NVMe for System/Caches/Logs/Downloads
    5 x Western Digital 10To HDD in RAID 6 for Datas
    1 x Western Digital 2To HDD for Backups

    Powered by OMV v5.6.26 & Linux kernel 5.10.x

  • OK so whats the way to fix it.
    I read some post above. The Output of my dpkg -l | grep python


    My Sytem is omv 3.0.99 and as i am understand i use the 3.16.0-6-amd64 kernel. Setting under OMV-Extras Kernel.

Jetzt mitmachen!

Sie haben noch kein Benutzerkonto auf unserer Seite? Registrieren Sie sich kostenlos und nehmen Sie an unserer Community teil!