IMPORTANT INFORMATION -- Please read!

1. The "search..." box above searches the Docs & Forum Posts. The "Search" tab above just searches the Forum Posts.

Please use these to search for your issue *before* creating a new message topic, as your issue may have been previously solved.
2. Please put your Club # and Club Web Address in your Forum Signature (best) OR in each post to get faster support from us.
Click here to edit your signature at the bottom of the Profile Information tab.
3. Our user and admin docs are available at: support.toastmastersclubs.org/doc "There's a doc for that!"
4. There is an "Opt In" Feature for newly added members. The Opt In document explains the ~~strikethrough~~ member information. Click Here to View the Post
5. When posting a New Topic , please include all relevant details and be specific. When did your issue 1st occur? What operating system, browser, & browser version are you using? Did you refresh your browser cache? Are your cookies enabled? Lastly, a screen shot is often helpful.
6. Please abide by the Terms of Use . We are volunteers contributing our spare time. We are happy to assist you, so long as you are respectful and courteous.
7. We are always looking for new FreeToastHost Ambassadors to join our team and support fellow Toastmasters in their use of the FreeToastHost website system. If you are familiar with the system and have some interest, send a Send Us a Private Message.

TOPIC:

"unable to create/renew a HTTPS certificate..." message 3 years 9 months ago #85167

JTyson Topic Author Offline New Member Posts: 2 Thank you received: 0	Club 907529. Custom domain SkwimTM.org. The certificate expired, and is not renewing. I've reviewed the custom domain documentation and see nothing wrong. HELP! Jon Tyson
	The topic has been locked.

"unable to create/renew a HTTPS certificate..." message 3 years 9 months ago #85168

Brian Offline Administrator Posts: 10469 Thank you received: 3866	Your domain is not setup correct you are missing several DNS records www record missing mail record missing Mail MX record missing Please read the documentation and correct the issues. support.toastmastersclubs.org/doc/item/dns-settings-overview
	The topic has been locked.

"unable to create/renew a HTTPS certificate..." message 3 years 9 months ago #85169

SteveTheTechie
Offline
Administrator
Posts: 11526
Thank you received: 3795

In addition, here are some log entries from our cert renewal loop--the renewal loop has tried three times already to renew this cert:

(Notice the part below that says "DNS problem: NXDOMAIN looking up A for www.skwimtm.org - check that a DNS record exists for this domain")

[Sat Sep 18 08:27:59 2021 GMT - Renewal Loop] Domain List (1 domains) = skwimtm.org
[Sat Sep 18 08:27:59 2021 GMT - Renewal Loop] Crypt::LE Module Version = 0.36
[Sat Sep 18 08:27:59 2021 GMT - Renewal Loop] Let's Encrypt API version = 2
[Sat Sep 18 08:27:59 2021 GMT - Renewal Loop] Loaded/generated Let's Encrypt account key.
[Sat Sep 18 08:27:59 2021 GMT - Renewal Loop] Loaded/generated private key for Certificate Signing Request (CSR) and loaded/generated encrypted CSR for these domains [skwimtm.org].
[Sat Sep 18 08:27:59 2021 GMT - Renewal Loop] Registered/re-registered with ACME server and accepted Terms of Service.  Account ID = 14899026
[Sat Sep 18 08:27:59 2021 GMT - Renewal Loop] Created token file [/tmp/certvalidation/acme-challenge/_l79yIbGGKJ9b0enmNHyK3_k0v00r7RTOB8TxEQZa_o] for domain verification.
[Sat Sep 18 08:27:59 2021 GMT - Renewal Loop] Created token file [/tmp/certvalidation/acme-challenge/DMGLTleGBiyv6eSC_GKhpV5XqaJXcZ9IuE_pIBtQNoI] for domain verification.
[Sat Sep 18 08:28:01 2021 GMT - Renewal Loop] Domain verification results for 'skwimtm.org': success.
[Sat Sep 18 08:28:01 2021 GMT - Renewal Loop] Deleted token file [/tmp/certvalidation/acme-challenge/_l79yIbGGKJ9b0enmNHyK3_k0v00r7RTOB8TxEQZa_o] used for domain verification.
[Sat Sep 18 08:28:04 2021 GMT - Renewal Loop] Domain verification results for 'www.skwimtm.org': error.
DNS problem: NXDOMAIN looking up A for www.skwimtm.org - check that a DNS record exists for this domain
[Sat Sep 18 08:28:04 2021 GMT - Renewal Loop] Deleted token file [/tmp/certvalidation/acme-challenge/DMGLTleGBiyv6eSC_GKhpV5XqaJXcZ9IuE_pIBtQNoI] used for domain verification.
[Sat Sep 18 08:28:04 2021 GMT - Renewal Loop] Could not generate the certificate--request_certificate() failed: Could not finalize an order.

Last edit: by SteveTheTechie.

The topic has been locked.

"unable to create/renew a HTTPS certificate..." message 3 years 9 months ago #85175

JTyson Topic Author Offline New Member Posts: 2 Thank you received: 0	Google Domains showed all of those, but I did see they were not showing. I deleted them al and recreated them and they are showing now. Of course the DNS entries have to propogate, and I believe there is a nioghtky cycle to check certificates? Is there any way for you to verify my settings now? Thanks for all your help!
	The topic has been locked.

"unable to create/renew a HTTPS certificate..." message 3 years 9 months ago #85187

Brian Offline Administrator Posts: 10469 Thank you received: 3866	[Wed Sep 22 15:48:53 2021 GMT] SSL certificate successfully created for the following domains [skwimtm.org www.skwimtm.org]. [Wed Sep 22 15:48:53 2021 GMT] Cert Expires: Tue Dec 21 14:48:52 2021 UTC [skwimtm.org.crt]
	The topic has been locked.

Forum

Support Requests

Public Forums