Renewal for SSL Certificate for ***.3cx.com.au failed

[steve-sydney]

Hi People Ive seen this before and it usually resolves itself the next day, but its happening for consecutive days on multiple servers.
Is there are current issue with SSL renewals?

How many days can i wait for it to resolve itself before it becomes an issue?

Coincidentally its happening at the same time the backup is happening, could this be related?

 

[AWS2P]

You can modify backup starting time, to avoid synchronicity with Cert renewal almost , this won't be a doubt anymore .

 

[it@agel]

Having same problem. Looks like issue in 3CX Lets Encrypt services.

 

[seneco]

Same here:

HTTPS Certificate renewal Failed - Error:
IpUpdater.FqdnGenerationException: Error creating FQDN: FQDN generation for this key is in progress. Please try later.
at PostInstall.CertificateHelper.ProcessCertificatesDirectory(String directory, Boolean temporaryCertificateGenerated, Int32 regenerateNotSelfSignedCertificatesFrom, Int32 regenerateNotSelfSignedCertificatesTo, CloudServerStatus statuses, Int32 regenerateCertificateExiredInDays, String appBin, UInt16 sipPort, UInt16 tunnelPort, Boolean isPassiveFailoverMode)
at PostInstall.CertificateHelper.RenewCertificates(String appBin, String nginxConfigFolder, String configurationPath)


Sometimes there is a communication problem between DNS Servers and LetsEncrypt which results in this exception. This happens rarely. In most cases, the second attempt will work. 3CX PBX will try again.

 

[complex1]

Same here.

 

[StefanW]

as the email also stated that it is not a fatal issue and will be retried tomorrow.
Maybe something occurred on Let's Encrypt site. Let us know tomorrow.

 

[commercial1]

Ive been seeing the same issue for the last 2 days across most of our PBX's

 

[manfer]

Same issue two days in a row now. How did you solved this?

Could it be related to saltstack repository issue?
https://www.3cx.com/community/threads/update-failing-saltstack-issue.74217/

 

[JohnS_3CX]

Hi,

Give it a couple more days because LE has had some service disruption recently and they might still have ongoing operations.

The PBX starts trying to renew about 30 days before expiry so you should have ample time to react if needed.