It is currently Thu Nov 26, 2020 10:16 am
All times are UTC + 8 hours

Unable to renew Let's Encrypt certificate : NAS admin is now unreachable

Got a question about our NAS utilities? The answer lies within.

Unable to renew Let's Encrypt certificate : NAS admin is now unreachable

Postby albiréo » Tue Jul 14, 2020 3:26 pm

Hello,

As usually, renewing my Let's encrypt certificate is a war. Since now I won. Today, I loose.

The functionnality has a big bug : when renewing, le old certificate is not deleted before and a message like that appears "unable to renew because the certificate exists"
So, each time I must manually delete the old certificate in the deep of the system directories.

Today, I think I made a mistake : I deleted my old certificate, asked for a renew (I've should have asked for a new certificate, I think) and bam ! : "The connection with your server is lost".
I retried to connect : "certificate is revoked"

Now, I can't access to my admin site !!!

How to fix that ? How to renew my certificates without enormous difficulties ?

Thank you for your help !

Have a good day !

XB
albiréo
 
Posts: 2
Joined: Fri Jan 26, 2018 12:07 am

Re: Unable to renew Let's Encrypt certificate : NAS admin is now unreachable

Postby father.mande » Tue Jul 14, 2020 3:58 pm

Hi,
==== first call the support to get the best solution
depends of what is always available ...
if you can't access due to forcing https only BUT keep ssh access ... you can connect using ssh root / your_admin_password
... case 1 you know where are the renew command for let's encrypt ... so execute it (I don't use it)
... case 2 you don't known .. in this case change in /volume0/etc/nas.conf the line "HttpsOnly = Yes" to "HttpsOnly = No" ... reboot you get access to admin gui using http port (no https)
Another way is to use a short reset to get back the default basic configuration (you lost nothing ... if you don't do any error (too long press for ex.)), after web admin port is return to default and admin password also ... and network (ex. if you use port trunking ... ) return to "normal" mode.

Others possibilities can exist ... but best is always to check with support to be sure to use the best solution in your situation.

After you must understand why the renew not work as expected ... with the support ...
Philippe.
AS5202T /AS5002T / AS202TE / AS1002T
My Blog specific to my APKG : https://blog.father-mande.ovh/
User avatar
father.mande
 
Posts: 1047
Joined: Sat Sep 12, 2015 2:55 am

Re: Unable to renew Let's Encrypt certificate : NAS admin is now unreachable

Postby albiréo » Tue Jul 14, 2020 5:20 pm

Hi Philippe,
Thank you for your answer ! :)
I can connect admin session with SSH. So I can do what you advised.

But after several tests, my ploblem looks a little different :
- Only the browser with whom I made the renew can't connect
- On the same computer, the others browser are connecting well and the certificate renewing was working well. :o
- The others computers at home have no problem to connect, too.

The issue is only encountered with the browser I used. I don't know why...

Yes, calling the Asustor support is a good idea.

XB
albiréo
 
Posts: 2
Joined: Fri Jan 26, 2018 12:07 am

Re: Unable to renew Let's Encrypt certificate : NAS admin is now unreachable

Postby father.mande » Tue Jul 14, 2020 10:00 pm

AS5202T /AS5002T / AS202TE / AS1002T
My Blog specific to my APKG : https://blog.father-mande.ovh/
User avatar
father.mande
 
Posts: 1047
Joined: Sat Sep 12, 2015 2:55 am

Return to NAS Utilities

  • You cannot post new topics in this forum
    You cannot reply to topics in this forum
    You cannot edit your posts in this forum
    You cannot delete your posts in this forum
    You cannot post attachments in this forum
  • Who is online

    Users browsing this forum: No registered users and 1 guest