This is long but I'm at a dead end so I'm going to take a chance. This is my letsyncrypt.ini After I ran jsexec letsyncrypt.js
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
GroupReadableKeyFile = false
[Domains]
havens.synchronetbbs.org = /sbbs/web/root
This is long but I'm at a dead end so I'm going to take a chance. This is my letsyncrypt.ini After I ran jsexec letsyncrypt.js
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
GroupReadableKeyFile = false
[Domains]
havens.synchronetbbs.org = /sbbs/web/root
[key_id] acme-v02.api.letsencrypt.org=https://acme-v02.api.letsencrypt.org/acme /acct/73804856
Before I ran jsexec letsyncrypt.js the [key_id] was empty
This is long but I'm at a dead end so I'm going to take a chance.This is
my letsyncrypt.ini After I ran jsexec letsyncrypt.js
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
GroupReadableKeyFile = false
[Domains]
havens.synchronetbbs.org = /sbbs/web/root
[key_id] acme-v02.api.letsencrypt.org=https://acme-v02.api.letsencrypt.org/a
cme/acct/73804856
Before I ran jsexec letsyncrypt.js the [key_id] was empty
Below is the results I got when I ran jsexec letsyncrypt.js
root@havens:/sbbs/ctrl# jsexec letsyncrypt.js2017.pdf>;re
JSexec v3.17c-Linux (rev 1.210) - Execute Synchronet JavaScript Module Compiled Nov 27 2019 16:15:07 with GCC 7.4.0
Loading configuration files from /sbbs/ctrl
JavaScript-C 1.8.5 2011-03-31
JavaScript: Creating runtime: 8388608 bytes
JavaScript: Initializing context (stack: 16384 bytes)
Reading script from /sbbs/exec/letsyncrypt.js
/sbbs/exec/letsyncrypt.js compiled in 0.00 seconds
Getting directory.
Calling newAccount.
0009 TLS ERROR 'No data was read because the remote system closed the connection (recv() == 0)' (-1) popping data
0009 TLS ERROR 'No data was read because the remote system closed the connection (recv() == 0)' (-1) popping data
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
{
"type": "urn:ietf:params:acme:error:accountDoesNotExist",
"detail": "No account exists with the provided key",
"status": 400
}
Calling newAccount.
0009 TLS ERROR 'No data was read because the remote system closed the connection (recv() == 0)' (-1) popping data
0009 TLS ERROR 'No data was read because the remote system closed the connection (recv() == 0)' (-1) popping data
Location: https://acme-v02.api.letsencrypt.org/acme/acct/73804856
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Link: <https://letsencrypt.org/documents/LE-SA-v1.2-November-15-
l="terms-of-service"Link:
Calling newOrder.
0008 TLS ERROR 'No data was read because the remote system closed the connection (recv() == 0)' (-1) popping data
Location: https://acme-v02.api.letsencrypt.org/acme/order/73804856/1755750520
<https://acme-v02.api.letsencrypt.org/directory>;rel="index"WnzWdTJkfLLj
Getting authorization.
0008 TLS ERROR 'No data was read because the remote system closed the connection (recv() == 0)' (-1) popping data
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Creating /sbbs/web/root/.well-known/acme-challenge/g7yWQLcK3jXu-
RlftE1KOlInjRXj-BULink:
Accepting challenge.
0008 TLS ERROR 'No data was read because the remote system closed the connection (recv() == 0)' (-1) popping data
Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/1731241950/8igCUQ
<https://acme-v02.api.letsencrypt.org/directory>;rel="index"v3/1731241950>;rel="up"
Link:
<https://acme-v02.api.letsencrypt.org/acme/authz-
Polling authorization.{"type":"
0008 TLS ERROR 'No data was read because the remote system closed the connection (recv() == 0)' (-1) popping data
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Polling authorization.
0008 TLS ERROR 'No data was read because the remote system closed the connection (recv() == 0)' (-1) popping data
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
http-01","status":"invalid","error":{"type":"urn:ietf:params:acme:error:conn
ection","detail":"Fetching http://havens.synchronetbbs.org/.well-known/acme-
challenge/g7yWQLcK3jXu-WnzWdTJkfLLjRlftE1KOlInjRXj-BU: Connectionrefused","
status":400},"url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/17312
41950/8igCUQ","token":"g7yWQLcK3jXu-WnzWdTJkfLLjRlftE1KOlInjRXj-BU","validat
ionRecord":[{"url":"http://havens.synchronetbbs.org/.well-known/acme-challen
ge/g7yWQLcK3jXu-WnzWdTJkfLLjRlftE1KOlInjRXj-BU","hostname":"havens.synchrone
tbbs.org","port":"80","addressesResolved":["45.56.88.52"],"addressUsed":"45.
56.88.52"}]}
!JavaScript : uncaught exception: Authorization failed... https://acme-v02.api.letsencrypt.org/acme/authz-v3/1731241950 /sbbs/exec/letsyncrypt.js executed in 25.32 seconds
!Module (letsyncrypt.js) set exit_code: 1
JavaScript: Destroying context
JavaScript: Destroying runtime
Returning error code: 1
root@havens:/sbbs/ctrl#
Any help as to why I can't get a certificate? Keep in mind I have Noclue
as to who owns and is responsible for synchronetbbs.org. I don't whatI'm
looking at here. I just see a lot of "failed" lines. Thanks
H A V E N S B B S havens.synchro.net:23
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
GroupReadableKeyFile = false
[Domains]Does that path match the [Web] RootDirectory value in your ctrl/sbbs.ini
havens.synchronetbbs.org = /sbbs/web/root
Re: Letsyncrypt help
By: Digital Man to HusTler on Mon Dec 16 2019 10:51 am
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
GroupReadableKeyFile = false
[Domains]Does that path match the [Web] RootDirectory value in your ctrl/sbbs.ini
havens.synchronetbbs.org = /sbbs/web/root
Which? Are you saying Directory = /directory should be
Directory = /sbbs/web/root?
When I follow the ip address 45.56.88.52 I get havens.synchro.net yet you have [Domains] havens.synchronetbbs.org in your letsyncrypt.ini file so
the hash does not match which negates the certificate ... try changing [Domains] to havens.synchro.net; delete the [Key_id] and [State] then
rerun ./jsexec letsyncrypt.js --force
Please post your results
Re: Re: Letsyncrypt helpyou
By: Mortifis to HusTler on Wed Dec 18 2019 11:26 am
When I follow the ip address 45.56.88.52 I get havens.synchro.net yet
sbbs.inihave [Domains] havens.synchronetbbs.org in your letsyncrypt.ini file so the hash does not match which negates the certificate ... try changing [Domains] to havens.synchro.net; delete the [Key_id] and [State] then rerun ./jsexec letsyncrypt.js --force
Please post your results
Ok I followed yours and DM's instruction. My letsyncrypt.ini and
have my root directory as /sbbs/webv4/root
here are the results after I run letsyncrypt.js
The script compiles but no results echo back.
I then log back on to the server and reboot
Now both havens.synchro.net and havens.synchronetbbs.org "closeunexpectedly
<--------------snip----------------------->
Here's a sniplet of my letsyncrypt.ini and sbbs.ini
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
GroupReadableKeyFile = false
[Domains]
havens.synchro.net = /sbbs/webv4/root
[State]
[key_id]
<------------------------------snip----------------------------------->
[Web] Web (HTTP) Server
AutoStart = True
; HTTP interface(s)
Interface =
Port = 80
HTTPS interface(s)
TLSInterface =
TLSPort = 443
MaxClients = 150
RootDirectory=/sbbs/webv4/root
TOSAGreed = true
root@huavens:/sbbs/ctrl# jsexec letsyncrypt.js --force
JSexec v3.17c-Linux (rev 1.210) - Execute Synchronet JavaScript Module Compiled Nov 27 2019 16:15:07 with GCC 7.4.0
Loading configuration files from /sbbs/ctrl
JavaScript-C 1.8.5 2011-03-31
JavaScript: Creating runtime: 8388608 bytes
JavaScript: Initializing context (stack: 16384 bytes)
Reading script from /sbbs/exec/letsyncrypt.js
/sbbs/exec/letsyncrypt.js compiled in 0.00 seconds
After this I have no control. ctrl -c -x -d does not give me the prompt back.
When I follow the ip address 45.56.88.52 I get havens.synchro.net yet you have [Domains] havens.synchronetbbs.org in your letsyncrypt.ini file so the hash does not match which negates the certificate ... try Please post your results
[Domains]
havens.synchro.net = /sbbs/webv4/root
[State]
[key_id]
When the [State] and [key_id] sections are empty, that says that the letsyncrypt.js did not work.
I'm not clear why you're running letsyncrypt.js manually rather than as a timed event as instructioned on the wiki.synchro.net page.
I'm not clear why you're using the --force command-line option.
Here's a sniplet of my letsyncrypt.ini and sbbs.ini
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
toHost = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
get rid of that Directory line in the global section... it isn't pointing
anywhere valid anyway...
toHere's a sniplet of my letsyncrypt.ini and sbbs.ini
Host = acme-v02.api.letsencrypt.org
Directory = /directory
get rid of that Directory line in the global section... it isn't pointing
anywhere valid anyway...
pointingHost = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
get rid of that Directory line in the global section... it isn't
to anywhere valid anyway...
I believe that's for the letsencrypt.org side.
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
get rid of that Directory line in the global section... it isn't pointing to anywhere valid anyway...
I believe that's for the letsencrypt.org side.
Re: Re: Letsyncrypt help
By: Altere to Rampage on Wed Dec 18 2019 10:30:29
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
get rid of that Directory line in the global section... it isn't pointing to anywhere valid anyway...
I believe that's for the letsencrypt.org side.
it doesn't exist at all in my letyncrypt.ini file at all... in fact, the only thing i started with was TOSAgreed=true on the first line... i have only one domain at this time...
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
get rid of that Directory line in the global section... it isn't pointing to anywhere valid anyway...
I believe that's for the letsencrypt.org side.
it doesn't exist at all in my letyncrypt.ini file at all... in fact, the only thing i started with was TOSAgreed=true on the first line... i have only one domain at this time...
Host = acme-v02.api.letsencrypt.org
Directory = /directory
TOSAgreed = true
get rid of that Directory line in the global section... it isn't pointing to anywhere valid anyway...
I believe that's for the letsencrypt.org side.
This certificate shit has to be the most stupid thing I've ever had to deal with as a BBS Sysop.
to deal with as a BBS Sysop.This certificate shit has to be the most stupid thing I've ever had
<shrug> No one else has had this much of a problem getting it going. Haveyou tried removing the files that were
created and letting the timed even re-create them? It's been recommendedtwice but I haven't seen any confirmation
that you've done that. At this point I'd probably obtain a fresh copy ofletsyncrypt.ini from cvs as well and follow
the wiki to the T aside from having both your hosts.domains under[Domains].
"/directory" is the default value of the letsyncrypt.ini Directory
key. So having it present and set to "/directory" is the same as not having it. It's required for the ACMEv2 protocol exchange and does not refer to a directory on the BBS's local file system.
Sysop: | Keyop |
---|---|
Location: | Huddersfield, West Yorkshire, UK |
Users: | 368 |
Nodes: | 16 (2 / 14) |
Uptime: | 86:38:13 |
Calls: | 7,895 |
Calls today: | 1 |
Files: | 12,968 |
Messages: | 5,792,011 |