Solved 3CX SSL Renewal Failed

[Harry Torres]

Hello. Got an email this morning about SSL Renewal Fail for one of my clients. Google Cloud hosted version 16.0.1581:

HTTPS Certificate renewal Failed - Error:
IpUpdater.FqdnGenerationException: Error creating FQDN: Unexpected error : {
"type": "urn:acme:error:badNonce",
"detail": "JWS has invalid anti-replay nonce o74X-pX3ao64REXfdjUS6bE30UPEdtz7M_0594E7qns",
"status": 400
} ; LetsEncrypt: The remote server returned an error: (400) Bad Request.
at PostInstall.CertificateHelper.ProcessCertificatesDirectory(String directory, Boolean temporaryCertificateGenerated, Int32 regenerateNotSelfSignedCertificatesFrom, Int32 regenerateNotSelfSignedCertificatesTo, CloudServerStatus statuses, Int32 regenerateCertificateExiredInDays, String appBin, UInt16 sipPort, UInt16 tunnelPort, Boolean isPassiveFailoverMode)
at PostInstall.CertificateHelper.RenewCertificates(String appBin, String nginxConfigFolder, String configurationPath)

Is there a way to manually fix it? I'm trying to avoid down time.

Thanks.

 

[Chris_F]

Do you have current maintenance on this PBX?

 

[Harry Torres]

Yes, until license renewal, then it renews again. 3CX is up to date.

 

[cobaltit]

So unless it's been failing for weeks you should be good. There should be plenty of time until the cert actually expires and it only tries once a day.

 

[Harry Torres]

You are right!! Thank you so much for this information. It tried again overnight and succeeded.