Thread Info
  • State Not Answered
  • Replies 4 replies
  • Subscribers 4 subscribers
  • Views 309 views
  • Users 0 members are here
Options
Suggested

Latest UTM and Let's Encrypt Failures

Exrace

Having issues recently with renewing LE certificates.
For some time, I had a _acme-challenge. TXT record in my UTM firewall domain name.
I don't recall how I got the token, but LE was working fine until this year. Possibly the April changes broke validation using this token as the notes talk about requiring a way to automate adding a challenge record to DNS.

What are others doing to fix this?

Need see if there is a way to create this token at Lets' Encrypt.

The LE log is a bit useless for this:
2024:07:04-00:46:02 xxx letsencrypt[31867]: I Renew certificate: execution failed
2024:07:04-08:47:01 xxx letsencrypt[13531]: E Renew certificate: Incorrect response code from ACME server: 500
2024:07:04-08:47:01 xxx letsencrypt[13531]: E Renew certificate: URL was: acme-v02.api.letsencrypt.org/directory
2024:07:04-08:47:01 xxx letsencrypt[13531]: I Renew certificate: handling CSR REF_CaCsrYellowExt12 for domain set [xxx.domain.com]
2024:07:04-08:47:01 xxx letsencrypt[13531]: E Renew certificate: TOS_UNAVAILABLE: Could not obtain the current version of the Let's Encrypt Terms of Service

Parents Reply
  • 0 in reply to Vivek Jagad

    That doesn't look to resolve the issue for me.
    I tried removing the X1 cert and reuploading the cert but have same issue. 
    I also tried the step disabling the LE service and reenable and now we have the "E Create account: failed to create account" message. I don't have shell access to this server right now so I can't test the wget to see if there is another issue with certs.

Children
Unfiltered HTML