I switched my Raspbery Pi 2 for a Raspberry pi3.
And now the certificate no longer seems to be accepted by Sakia.
I already changed the key and remote ipv6 network on Duniter as the ipv6 address is different.
What should I do?
Trying to renew the certificate fails.
admin@Xroklaus:~ $ sudo yunohost domain cert-renew --force
Error: Wrote file to /tmp/acme-challenge-public/TH6t-IY0aBep7n4SYY_twgopTqaLyAKb7hsPVm6r6JE, but couldn't download http://duniter-folatt.nohost.me/.well-known/acme-challenge/TH6t-IY0aBep7n4SYY_twgopTqaLyAKb7hsPVm6r6JE
Error: Certificate renewing for duniter-folatt.nohost.me failed !
Error: Traceback (most recent call last):
File "/usr/lib/moulinette/yunohost/certificate.py", line 382, in certificate_renew
_fetch_and_enable_new_certificate(domain, staging)
File "/usr/lib/moulinette/yunohost/certificate.py", line 567, in _fetch_and_enable_new_certificate
'certmanager_cert_signing_failed'))
MoulinetteError: [Errno 22] Signing the new certificate failed
Error: [Errno 22] Signing the new certificate failed
In addition to the [Errno 22] “signing certificate failure” problem, I also seem to have an [Errno 113] “No route to host” problem about retrieving public IPv6.
admin@Xroklaus:~ $ sudo yunohost domain cert-install --force --debug duniter-folatt.nohost.me
228 DEBUG loading actions map namespace 'yunohost'
289 DEBUG extra parameter classes loaded: ['ask', 'password', 'required', 'pattern']
289 DEBUG initializing base actions map parser for cli
293 DEBUG registering new callback action 'yunohost.utils.packages.ynh_packages_version' to ['-v', '--version']
556 DEBUG initialize authenticator 'ldap-anonymous' with: uri='ldap://localhost:389', base_dn='dc=yunohost,dc=org', user_rdn='None'
560 DEBUG lock has been acquired
898 INFO processing action [13128.1]: yunohost.domain.cert-install with args={'no_checks': False, 'force': True, 'domain_list': ['duniter-folatt.nohost.me'], 'self_signed': False, 'auth': <moulinette.authenticators.ldap.Authenticator object at 0x76580590>, 'staging': False}
1119 INFO Starting new HTTP connection (1): 83.163.103.119
1124 DEBUG "HEAD / HTTP/1.1" 302 0
1126 INFO Now attempting install of certificate for domain duniter-folatt.nohost.me!
1294 INFO Starting new HTTP connection (1): 83.163.103.119
1299 DEBUG "HEAD / HTTP/1.1" 302 0
1302 INFO Nginx configuration file for ACME challenge already exists for domain, skipping.
1303 DEBUG Making sure tmp folders exists...
4482 DEBUG cannot retrieve public IPv6
Traceback (most recent call last):
File "/usr/lib/moulinette/yunohost/domain.py", line 278, in get_public_ip
return urlopen(url).read().strip()
File "/usr/lib/python2.7/urllib.py", line 87, in urlopen
return opener.open(url)
File "/usr/lib/python2.7/urllib.py", line 213, in open
return getattr(self, name)(url)
File "/usr/lib/python2.7/urllib.py", line 443, in open_https
h.endheaders(data)
File "/usr/lib/python2.7/httplib.py", line 1035, in endheaders
self._send_output(message_body)
File "/usr/lib/python2.7/httplib.py", line 879, in _send_output
self.send(msg)
File "/usr/lib/python2.7/httplib.py", line 841, in send
self.connect()
File "/usr/lib/python2.7/httplib.py", line 1242, in connect
HTTPConnection.connect(self)
File "/usr/lib/python2.7/httplib.py", line 822, in connect
self.timeout, self.source_address)
File "/usr/lib/python2.7/socket.py", line 571, in create_connection
raise err
IOError: [Errno socket error] [Errno 113] No route to host
4492 INFO Prepare key and certificate signing request (CSR) for duniter-folatt.nohost.me...
10867 INFO Saving to /tmp/acme-challenge-private/duniter-folatt.nohost.me.csr.
10868 INFO Now using ACME Tiny to sign the certificate...
10868 INFO Parsing account key...
10902 INFO Parsing CSR...
10930 INFO Registering account...
11880 INFO Already registered!
11881 INFO Verifying duniter-folatt.nohost.me...
12740 ERROR Wrote file to /tmp/acme-challenge-public/TH6t-IY0aBep7n4SYY_twgopTqaLyAKb7hsPVm6r6JE, but couldn't download http://duniter-folatt.nohost.me/.well-known/acme-challenge/TH6t-IY0aBep7n4SYY_twgopTqaLyAKb7hsPVm6r6JE
12741 ERROR Certificate installation for duniter-folatt.nohost.me failed !
Exception: [Errno 22] Signing the new certificate failed
12742 DEBUG action [13128.1] ended after 11.843s
12742 DEBUG lock has been released