search

Ylianst / MeshCommander

MeshCommander is a Intel(R) Active Management Technology (Intel(R) AMT) remote management tool. It's feature rich and includes a built-in remote desktop viewer for Hardware-KVM, a Serial-over-LAN terminal, IDER-Redirection support and much more. MeshCommander is built on web technologies and runs on many plaforms. In addition to being available as a stand-alone tool, MeshCommander was built to be very space efficient to that it can be uploaded into Intel AMT flash space to have it served diretly from the Intel AMT web serve.
Apache License 2.0
369 stars 80 forks source link

Manually renew LE cert #79

Closed ben71fl closed 2 years ago

ben71fl commented 2 years ago

We have port 80 open and running for sometime , but recently the LE cert has not updated. I can get on through localhost , but could not find where I can manually update the certificate. I re-checked my config, and I see http is redirecting to https (not sure if it was always like that) , I moved the letsencrypt folder out, restarted and a new folder was created but no new certs are being received.

Anyway I can debug / troubleshoot this? the mesherrors.txt file doesn't have anything in there. Also, I notice that no matter what I change in the config.json the server always 'redirects' 80 to 443, which would seem to be ok, except now that I cant renew the cert. FWIW I went to letsencrypt test for my site and it came back green - no issue.

ben71fl commented 2 years ago

An update I found the console commands for le and am getting this

Failed to obtain certificate: Error finalizing order :: signature algorithm not supported

ben71fl commented 2 years ago

Solved the issue by upgrading from 1.0.0 stable to 1.0.99 which had in it acme-client update. I also read acme is no longer doing 3072 certs, so switched also to 2048 and restarted and everything came up. Hope someone else finds this useful