Unable to renew Let's Encrypt certificate : NAS admin is now unreachable

[albiréo]

Hello,

As usually, renewing my Let's encrypt certificate is a war. Since now I won. Today, I loose.

The functionnality has a big bug : when renewing, le old certificate is not deleted before and a message like that appears "unable to renew because the certificate exists"
So, each time I must manually delete the old certificate in the deep of the system directories.

Today, I think I made a mistake : I deleted my old certificate, asked for a renew (I've should have asked for a new certificate, I think) and bam ! : "The connection with your server is lost".
I retried to connect : "certificate is revoked"

Now, I can't access to my admin site !!!

How to fix that ? How to renew my certificates without enormous difficulties ?

Thank you for your help !

Have a good day !

XB

[father.mande]

Hi,
==== first call the support to get the best solution
depends of what is always available ...
if you can't access due to forcing https only BUT keep ssh access ... you can connect using ssh root / your_admin_password
... case 1 you know where are the renew command for let's encrypt ... so execute it (I don't use it)
... case 2 you don't known .. in this case change in /volume0/etc/nas.conf the line "HttpsOnly = Yes" to "HttpsOnly = No" ... reboot you get access to admin gui using http port (no https)
Another way is to use a short reset to get back the default basic configuration (you lost nothing ... if you don't do any error (too long press for ex.)), after web admin port is return to default and admin password also ... and network (ex. if you use port trunking ... ) return to "normal" mode.

Others possibilities can exist ... but best is always to check with support to be sure to use the best solution in your situation.

After you must understand why the renew not work as expected ... with the support ...
Philippe.

[albiréo]

Hi Philippe,
Thank you for your answer !
I can connect admin session with SSH. So I can do what you advised.

But after several tests, my ploblem looks a little different :
- Only the browser with whom I made the renew can't connect
- On the same computer, the others browser are connecting well and the certificate renewing was working well.
- The others computers at home have no problem to connect, too.

The issue is only encountered with the browser I used. I don't know why...

Yes, calling the Asustor support is a good idea.

XB

[father.mande]

Hi,

Perhaps a search way : https://www.a2hosting.com/kb/getting-st ... -ssl-state

Philippe.