Bonjour,
impossible de renouveler mon certificat LE, je n’ai pourtant pas modifié ma zone DNS ni rien d’autre… une idée du pourquoi ? oO
Merci
admin@Yunohost:~$ sudo yunohost domain cert-renew
Error: Certificate renewing for vincentux.fr failed !
Error: Traceback (most recent call last):
File "/usr/lib/moulinette/yunohost/certificate.py", line 380, in certificate_renew
_check_domain_is_ready_for_ACME(domain)
File "/usr/lib/moulinette/yunohost/certificate.py", line 826, in _check_domain_is_ready_for_ACME
'certmanager_domain_not_resolved_locally', domain=domain))
MoulinetteError: [Errno 22] The domain vincentux.fr cannot be resolved from inside your Yunohost server. This might happen if you recently modified your DNS record. If so, please wait a few hours for it to propagate. If the issue persists, consider adding vincentux.fr to /etc/hosts. (If you know what you are doing, use --no-checks to disable those checks.)
Error: [Errno 22] The domain vincentux.fr cannot be resolved from inside your Yunohost server. This might happen if you recently modified your DNS record. If so, please wait a few hours for it to propagate. If the issue persists, consider adding vincentux.fr to /etc/hosts. (If you know what you are doing, use --no-checks to disable those checks.)
et la commande cert-status :
admin@Yunohost:~$ sudo yunohost domain cert-status
certificates:
duniter-g1.vincentux.fr:
CA_type: Let's Encrypt
summary: About to expire
validity: 9
ffsync.vincentux.fr:
CA_type: Let's Encrypt
summary: About to expire
validity: 3
gtest.vincentux.fr:
CA_type: Let's Encrypt
summary: CRITICAL
validity: -64
searx.vincentux.fr:
CA_type: Let's Encrypt
summary: About to expire
validity: 3
social.vincentux.fr:
CA_type: Let's Encrypt
summary: CRITICAL
validity: -1
vincentux.fr:
CA_type: Let's Encrypt
summary: About to expire
validity: 3
c’est bizarre du coup, parce que ça ne corresponds pas à l’IP pointée par le DNS… Tu sais à quoi pourrait correspondre cette ip ? Une ligne qui traîne dans /etc/hosts peut-être ? Sinon tu peux essayer de chercher avec grep -nr "163.172.180.43" /etc/
Tu aurais pas une IP dynamique par hasard (ou susceptible de changer régulièrement ?) Je crois que on a pas trop pris en compte ce cas pour le moment dans ce qui gère dnsmasq
admin@Yunohost:~$ sudo yunohost domain cert-renew
Success! Successfully renewed Let's Encrypt certificate for domain vincentux.fr!
Error: Certificate renewing for gtest.vincentux.fr failed !
Error: Traceback (most recent call last):
File "/usr/lib/moulinette/yunohost/certificate.py", line 380, in certificate_renew
_check_domain_is_ready_for_ACME(domain)
File "/usr/lib/moulinette/yunohost/certificate.py", line 812, in _check_domain_is_ready_for_ACME
if not _dns_ip_match_public_ip(public_ip, domain):
File "/usr/lib/moulinette/yunohost/certificate.py", line 836, in _dns_ip_match_public_ip
'certmanager_error_no_A_record', domain=domain))
MoulinetteError: [Errno 22] No DNS 'A' record found for gtest.vincentux.fr. You need to make your domain name point to your machine to be able to install a Let's Encrypt certificate! (If you know what you are doing, use --no-checks to disable those checks.)
Error: [Errno 22] No DNS 'A' record found for gtest.vincentux.fr. You need to make your domain name point to your machine to be able to install a Let's Encrypt certificate! (If you know what you are doing, use --no-checks to disable those checks.)
Success! Successfully renewed Let's Encrypt certificate for domain searx.vincentux.fr!
Success! Successfully renewed Let's Encrypt certificate for domain ffsync.vincentux.fr!
Success! Successfully renewed Let's Encrypt certificate for domain social.vincentux.fr!
Success! Successfully renewed Let's Encrypt certificate for domain duniter-g1.vincentux.fr!
admin@sc-mastodon:~$ sudo yunohost service regen-conf dnsmasq
Success! The configuration has been updated for service 'dnsmasq'
dnsmasq:
applied:
/etc/resolv.dnsmasq.conf:
status: updated
pending:
mais la commande suivante ne fonctionne pas
admin@sc-mastodon:~$ sudo yunohost domain cert-renew
Success! Successfully renewed Let's Encrypt certificate for domain rss.vincentux.fr!
Error: Wrote file to /tmp/acme-challenge-public/x_qZUhuRNg1W7O7xl-FbXBQcrdjYdA7JvEFrj01o4B4, but couldn't download http://mail.vincentux.fr/.well-known/acme-challenge/x_qZUhuRNg1W7O7xl-FbXBQcrdjYdA7JvEFrj01o4B4
Warning: Debug information:
- domain ip from DNS 51.15.211.242
- domain ip from local DNS 51.15.211.242
- public ip of the server 51.15.211.242
Error: Certificate renewing for mail.vincentux.fr failed !
Error: Traceback (most recent call last):
File "/usr/lib/moulinette/yunohost/certificate.py", line 381, in certificate_renew
_fetch_and_enable_new_certificate(domain, staging)
File "/usr/lib/moulinette/yunohost/certificate.py", line 567, in _fetch_and_enable_new_certificate
'certmanager_cert_signing_failed'))
MoulinetteError: [Errno 22] Signing the new certificate failed
Error: [Errno 22] Signing the new certificate failed
Success! Successfully renewed Let's Encrypt certificate for domain ffsync.vincentux.fr!
Y a t il moyen de supprimer le certificat puis de le re-installer ?
Tu n’as pas oublié le 
