Re: Let's Encrypt Error with cgit, httpd, acme-client

2018-08-27 Thread trondd
On Sun, August 26, 2018 4:40 pm, Parikh, Samir wrote: > > I guess my only remaining question is how did you know I needed to make > this change? I know the OpenBSD documentation is really good but I'm > still fascinated how people manage to sort things like this out. Maybe > it's just pure experi

Re: Let's Encrypt Error with cgit, httpd, acme-client

2018-08-26 Thread Parikh, Samir
Your suggestion of changing things up in my /etc/httpd.conf file did the trick! My initial version of the file, prior to initializing the account and requesting a new domain key ended up looking like this based on your suggestions: ext_ip="0.0.0.0" #server "localhost" { server "git.example.com" {

Re: Let's Encrypt Error with cgit, httpd, acme-client

2018-08-22 Thread trondd
On Wed, August 22, 2018 1:23 pm, Parikh, Samir wrote: > flipchan wrote on 22/08/18 01:19: >> Try removing all keys in the ssl directory aswell as >> /etc/acme/letsencrypt-privkey.pem > > Thank you for your suggestion! I tried that and still received a similar > error: > > # acme-client -vAD git.exa

Re: Let's Encrypt Error with cgit, httpd, acme-client

2018-08-22 Thread Parikh, Samir
flipchan wrote on 22/08/18 01:19: > Try removing all keys in the ssl directory aswell as > /etc/acme/letsencrypt-privkey.pem Thank you for your suggestion! I tried that and still received a similar error: # acme-client -vAD git.example.com acme-client: /etc/ssl/private/git.example.com.key: domain

Re: Let's Encrypt Error with cgit, httpd, acme-client

2018-08-22 Thread Parikh, Samir
Anthony J. Bentley wrote on 22/08/18 01:37: > Do you see anything in /var/www/logs/access.log? Here's what I see: > > example.com 66.133.109.36 - - [21/Aug/2018:23:03:35 -0600] "GET > /.well-known/acme-challenge/YXRuZWJ1c2FvdGV1Ym5hc290ZGFvZXNudGh1YW9lc25 > HTTP/1.1" 200 87 Thanks for your reply!

Re: Let's Encrypt Error with cgit, httpd, acme-client

2018-08-21 Thread Anthony J. Bentley
he...@ezaquarii.com writes: > On 21/08/2018 20:46, Parikh, Samir wrote:> # cgit CGI > > root "/cgi-bin/cgit.cgi" > > fastcgi socket "/run/slowcgi.sock" > > location "/.well-known/acme-challenge/*" { > > root { "/acme", strip 2 } > > } > > } > > Do you have /v

Re: Let's Encrypt Error with cgit, httpd, acme-client

2018-08-21 Thread Anthony J. Bentley
Hi Samir, Parikh, Samir writes: > I am running cgit to host my git repositories on OpenBSD 6.3 and am > trying enable https using Let's Encrypt. I run cgit as well (with the same httpd.conf, acme-client.conf, file permissions, etc), and have no trouble creating and renewing certs. Do you see any

Re: Let's Encrypt Error with cgit, httpd, acme-client

2018-08-21 Thread he...@ezaquarii.com
On 21/08/2018 20:46, Parikh, Samir wrote:> # cgit CGI root "/cgi-bin/cgit.cgi" fastcgi socket "/run/slowcgi.sock" location "/.well-known/acme-challenge/*" { root { "/acme", strip 2 } } } Do you have /var/www/cgi-bin/cgit.cgi/.well-known/acme-challenge/ di

Re: Let's Encrypt Error with cgit, httpd, acme-client

2018-08-21 Thread flipchan
Try removing all keys in the ssl directory aswell as /etc/acme/letsencrypt-privkey.pem On August 21, 2018 7:46:24 PM UTC, "Parikh, Samir" wrote: >I am running cgit to host my git repositories on OpenBSD 6.3 and am >trying enable https using Let's Encrypt. The URL of the cgit >repositories is a

Let's Encrypt Error with cgit, httpd, acme-client

2018-08-21 Thread Parikh, Samir
I am running cgit to host my git repositories on OpenBSD 6.3 and am trying enable https using Let's Encrypt. The URL of the cgit repositories is a subdomain of my main domain (e.g. git.domain.com). I get the following error below whenever I try to provision a certificate using acme-client. I hav