Solved Another Lets Encrypt Certificate failed to renew

Discussion in '3CX Phone System - General' started by THCO, Jul 12, 2017.

Thread Status:
Not open for further replies.
  1. THCO

    Joined:
    May 16, 2017
    Messages:
    56
    Likes Received:
    11
    I received the following email and Im not sure what to do.

    Lets Encrypt SSL certificate was failed to renew. Error: System.AggregateException: One or more errors occurred. ---> PostInstall.LetsEncrypt.LetsEncryptRegistrationException: Lets Encrypt authorization status 'invalid'. Authorization not completed. type : urn:acme:error:connection; detail : DNS problem: NXDOMAIN looking up TXT for _acme-challenge.xxxx.3cx.us; status : 400
    at PostInstall.LetsEncrypt.LetsEncryptClient.<CompleteCertificateGeneration>d__13.MoveNext()
    --- End of inner exception stack trace ---
    at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
    at PostInstall.LetsEncrypt.LetsEncryptClient.RegenerateCertificate(CertificateGenerationData certGenerationData, String keyFilePath, String csrFilePath, String domainName)
    at PostInstall.CertificateHelper.ProcessCertificatesDirectory(String directory, CloudServerStatus statuses, String appBin)
    at PostInstall.CertificateHelper.RenewCertificates(String appBin, String nginxConfigFolder, String configurationPath)
    ---> (Inner Exception #0) PostInstall.LetsEncrypt.LetsEncryptRegistrationException: Lets Encrypt authorization status 'invalid'. Authorization not completed. type : urn:acme:error:connection; detail : DNS problem: NXDOMAIN looking up TXT for _acme-challenge.xxxx.3cx.us; status : 400
    at PostInstall.LetsEncrypt.LetsEncryptClient.<CompleteCertificateGeneration>d__13.MoveNext()<---


    How can I check to see if this renewed properly.

    Thanks
     
  2. YiannisH_3CX

    YiannisH_3CX Support Team
    Staff Member 3CX Support

    Joined:
    May 10, 2016
    Messages:
    6,016
    Likes Received:
    421
    Hello @THCO,

    Please make sure that you can resolve www.letsencrypt.org correctly from the PBX machine and that nothing is blocking the communication between Let's Encrypt and the phone system.
     
  3. THCO

    Joined:
    May 16, 2017
    Messages:
    56
    Likes Received:
    11
    This issue has been resolved, received another email the next night stating the cert renewed.
     
Thread Status:
Not open for further replies.