vicibox-certbot webroot

[IanGP]

VERSION: 2.14-697a
BUILD: 190121-2019

Hi There,
This particular server is pretty old, but working fine, so not keen to change it just yet.
However, I need to renew the certificate via vicibox-certbot, but it's not completing.

But for the first time I'm seeing a message to enter the webroot for this server.
What should go in here?
I tried /srv/www/htdocs but no joy.
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

Probably a noob question, but fristration is getting the best of me this morning.

Regards
IanGP

[IanGP]

Workaround (because I've clearly broken something):

Code: Select all

certbot -d client.*********lutions.co.za --force-renewal

Code: Select all

Saving debug log to /var/log/letsencrypt/letsencrypt.log
ssl_module is statically linked but --apache-bin is missing; not disabling session tickets.
Renewing an existing certificate for client.*********lutions.co.za

Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/client.*********lutions.co.za/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/client.*********lutions.co.za/privkey.pem
This certificate expires on 2022-02-05.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.

Deploying certificate

We were unable to find a vhost with a ServerName or Address of client.*********lutions.co.za.
Which virtual host would you like to choose?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: 1111-default-ssl.conf          | vicibox.company.com   | HTTPS | Enabled
2: 1111-default.conf              | vicibox.company.com   |       | Enabled
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): ^CCould not install certificate
Exiting due to user request.

New certificate files saved to /etc/certbot/live/client.*********lutions.co.za.

Then created symlinks for all four files

Code: Select all

ln -s /etc/letsencrypt/archive/client.*********lutions.co.za/chain2.pem chain.pem

Restarted apache, ctrl-F5 in the browser, all good.

Not pretty, but working.
Methinks it's time for an upgrade.

[carpenox]

turn youre firewall off, then run certbot renew then turn firewall back on