Solved Renewal for SSL Certificate for <fqdn> failed

[it@agel]

Hello,

Receiving this error for 3 days in a row now:

HTTPS Certificate renewal Failed - Error:

IpUpdater.FqdnGenerationException: Error creating FQDN: FQDN generation for this key is in progress. Please try later.

at PostInstall.CertificateHelper.ProcessCertificatesDirectory(String directory, Boolean temporaryCertificateGenerated, Int32 regenerateNotSelfSignedCertificatesFrom, Int32 regenerateNotSelfSignedCertificatesTo, CloudServerStatus statuses, Int32 regenerateCertificateExiredInDays, String appBin, UInt16 sipPort, UInt16 tunnelPort, Boolean isPassiveFailoverMode)

at PostInstall.CertificateHelper.RenewCertificates(String appBin, String nginxConfigFolder, String configurationPath)



Sometimes there is a communication problem between DNS Servers and LetsEncrypt which results in this exception. This happens rarely. In most cases, the second attempt will work. 3CX PBX will try again.

I checked all the settings like internet connectivity and DNS resolving from the PBX, all working okay. Where should I start looking?

 

[commercial1]

I am seeing this across all of our PBX's for the last 2 days, did you get anywhere with it ?

 

[it@agel]

Do you have a 3CX FQDN aswell? If so, I might guess the error occurs on their (3CX) Lets Encrypt services.

 

[complex1]

Same issue here.

 

[StefanW]

as the email also stated that it is not a fatal issue and will be retried tomorrow.
Maybe something occurred on Let's Encrypt site. Let us know tomorrow.

 

[commercial1]

as the email also stated that it is not a fatal issue and will be retried tomorrow.
Maybe something occurred on Let's Encrypt site. Let us know tomorrow.

It has been occurring for the last few days, so i suspect it is an issue with the lets encrypt 3cx link.

 

[complex1]

After getting errors for 3 days in a row the LE certificate is successfully installed.

 

[JohnS_3CX]

That's good news! Looks like it may have been some maintenance Let's Encrypt was running:
https://statusgator.com/services/lets-encrypt