Related

Join the DigitalOcean Community Community

Join 1M+ other developers and:

  • Get help and share knowledge in Q&A
  • Subscribe to topics of interest
  • Get courses & tools that help you grow as a developer or small business owner
 Join Now
how to enable HTTP/2 after installing SSL via letsencrypt in command line Question Question
Webmin - Lets' encrypt SSL_ERROR_RX_RECORD_TOO_LONG (Firefox) Question Question

Question

Let's Encrypt renewal failing: unauthorized invalid response

Posted June 7, 2020 1.2k views
Let's Encrypt

Hi, I’m admittedly not super technical. I was following the instructions for renewing our Let’s Encrypt SSL cert (which has expired) for a Passbolt droplet and I’m getting the error below:
https://www.dropbox.com/s/wx7959q0rh0nf1d/letsencrypt-renewal-error.png?dl=0

Any recommendations? These are my current DNS settings:
https://www.dropbox.com/s/91m5c2u2qhoo9b5/Screen%20Shot%202020-06-06%20at%206.46.15%20PM.png?dl=0

The IP address is correctly specified. Is it failing because there’s no way to connect via SSL? If so seems like an inherent catch-22 and I’m not sure how to resolve. This instance has all passwords for all the .orgs we support so we’re dead in the water until I figure out how to renew. thanks for any suggestions

Add a comment
sean256979
By:
sean256979

Related

Join the DigitalOcean Community Community

Join 1M+ other developers and:

  • Get help and share knowledge in Q&A
  • Subscribe to topics of interest
  • Get courses & tools that help you grow as a developer or small business owner
 Join Now
how to enable HTTP/2 after installing SSL via letsencrypt in command line Question Question
Webmin - Lets' encrypt SSL_ERROR_RX_RECORD_TOO_LONG (Firefox) Question Question

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
Submit an Answer
2 answers
sean256979 June 7, 2020
Show answer This answer has been marked as resolved by sean256979.
denislavgavrilov June 7, 2020

Hey @sean256979,

From what I understand - you are trying to renew an SSL certificate for a droplet, meaning you are trying to get your droplet to work with HTTPS. I don’t know your current configuration but I can suggest one possible and well-known solution to the problem you are having:

-Issue a stand-alone certificate and put it in your certificates’ directory.
https://www.digitalocean.com/community/tutorials/how-to-use-certbot-standalone-mode-to-retrieve-let-s-encrypt-ssl-certificates-on-ubuntu-16-04

-Mount the certificates’ directory onto a docker container.
https://www.youtube.com/watch?v=nwdOooZbICA - Youtube
https://medium.com/@pentacent/nginx-and-lets-encrypt-with-docker-in-less-than-5-minutes-b4b8a60d3a71 - Medium(Better explanation)

-Connect your droplet needing the SSL certificate to the directory with the certificate.
https://medium.com/@pentacent/nginx-and-lets-encrypt-with-docker-in-less-than-5-minutes-b4b8a60d3a71

Best of luck and feel free to continue the thread!

Best regards,

How To Use Certbot Standalone Mode to Retrieve Let's Encrypt SSL Certificates on Ubuntu 16.04
by Brian Boucheron
Certbot offers a variety of ways to validate your domain, fetch certificates, and automatically configure Apache and Nginx. In this tutorial, we'll discuss Certbot's standalone mode and how to use it to secure other types of services, such as a mail server or a message broker like RabbitMQ.
Reply Report
  • sean256979 June 9, 2020

    Thanks for your suggestion. I actually got it worked out two days ago via the help of a buddy (see my response above). Solution involved reinstalling all the certbot dependencies and the renewal command worked after we did that. Not sure which dependency specifically was the problematic one but that solved it. Thx for your help

    Reply Report

Related

Looking for something else?

Ask a new question Search for more help