*.3cx.it certificate not renewed

[massimo_mic]

On 3cx 16.0.6.655 renewal certificate Failed everytime, now my certificate is expired:

Attach PbxConfigToolRenewCertificates.log of manual certificate renewal procedure started.


------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
The SSL Certificate renewal for ****************.3cx.it failed - Error:
Internal.Cryptography.CryptoThrowHelper+WindowsCryptographicException: Operazione richiesta non supportata.
at System.Security.Cryptography.CngKeyLite.SetKeyLength(SafeNCryptKeyHandle keyHandle, Int32 keySize)
at System.Security.Cryptography.CngKeyLite.GenerateNewExportableKey(String algorithm, Int32 keySize)
at System.Security.Cryptography.DSAImplementation.DSACng.GetDuplicatedKeyHandle()
at System.Security.Cryptography.DSAImplementation.DSACng.ExportKeyBlob(Boolean includePrivateParameters)
at System.Security.Cryptography.DSAImplementation.DSACng.ExportParameters(Boolean includePrivateParameters)
at PostInstall.CertificateUtils.DsaToDhParams(DSA dsa)
at PostInstall.CertificateGenerator.GenerateDhParam()
at PostInstall.CertificateGenerator.ProcessCertificatesDirectory(String directory, Boolean temporaryCertificateGenerated, Int32 regenerateNotSelfSignedCertificatesFrom, Int32 regenerateNotSelfSignedCertificatesTo, CloudServerStatus statuses, Int32 regenerateCertificateExiredInDays, String appBin, UInt16 sipPort, UInt16 tunnelPort, Nullable`1 httpPort, Nullable`1 httpsPort, Boolean isPassiveFailoverMode)
at PostInstall.CertificateGenerator.RenewCertificates(String appBin, String nginxConfigFolder, String configurationPath)

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

The SSL Certificate renewal for **********************.3cx.it failed - Max certificate limit Exceeded the maximum number of certificate requests. Limit to 5 certificates per domain per week. The SSL certificate is no longer valid or will expire. This is a sign of multiple active installations using the same FQDN.

 

[Saqqara]

Check this thread out https://www.3cx.com/community/threads/3cx-us-certificate-not-renewed.76708/

 

[massimo_mic]

Yes, i've a valid license perpetual and i try to reboot server and manual procedure described in other thread to renew certificate, but not working.

 

[JohnS_3CX]

Hi @massimo_mic

What version of Windows is this PBX running on?

 

[massimo_mic]

Windows server 2008 R2

i decide to migrate on VM debian

 

[massimo_mic]

i released my old fqdn *********.3cx.it because too many request block the certificate creation on new debian server, but i can't create new fqdn with *.3cx.it because the zone is not present on 3cx list , why?

 

[massimo_mic]

Reinstalled 3CX on VM linux, work, but i see this message on linux start:

service nftables Failed to start run systemctl status nftables.service for information.

i run command and show:

root@debian-3CX:~# systemctl status nftables.service
nftables.service - nftables
Loaded: loaded (/lib/systemd/system/nftables.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Sun 2020-10-18 12:10:03 CEST; 10min ago
Docs: man:nft(8)
http://wiki.nftables.org
Process: 408 ExecStart=/usr/sbin/nft -f /etc/nftables.conf (code=exited, status=1/FAILURE)
Main PID: 408 (code=exited, status=1/FAILURE)
ott 18 12:09:51 debian-3CX systemd[1]: Starting nftables...
ott 18 12:10:03 debian-3CX nft[408]: /etc/nftables.conf:71:13-32: Error: Could not parse ICMPv6 type
ott 18 12:10:03 debian-3CX nft[408]: mld2-listener-report, # type 143
ott 18 12:10:03 debian-3CX nft[408]: ^^^^^^^^^^^^^^^^^^^^
ott 18 12:10:03 debian-3CX systemd[1]: nftables.service: Main process exited, code=exited, status=1/FAILURE
ott 18 12:10:03 debian-3CX systemd[1]: Failed to start nftables.
ott 18 12:10:03 debian-3CX systemd[1]: nftables.service: Unit entered failed state.
ott 18 12:10:03 debian-3CX systemd[1]: nftables.service: Failed with result 'exit-code'.