j-c-m / ubnt-letsencrypt

Let's Encrypt setup instructions for Ubiquiti EdgeRouter
472 stars 68 forks source link

Script failing on new setup #8

Closed hulu1522 closed 7 years ago

hulu1522 commented 7 years ago

I keep getting these errors when trying to run renew.acme.sh for the first time. I have done with your instructions say and also the closed issue about using this for WAN IP. Is there certain ports that need to be exposed?

[Tue May 30 17:50:43 MDT 2017] Stopping gui service.
[Tue May 30 17:50:43 MDT 2017] Starting temporary acme challenge service.
[Tue May 30 17:50:43 MDT 2017] Unknown parameter : /tmp/server.key
[Tue May 30 17:50:43 MDT 2017] Stopping temporary acme challenge service.
[Tue May 30 17:50:44 MDT 2017] Starting gui service.
2017-05-30 17:50:44: (network.c.537) SSL: BIO_read_filename('/config/ssl/server.pem') failed

Thanks for your help on this issue.

j-c-m commented 7 years ago

What is the full command you ran for the initial renew.acme.sh?

hulu1522 commented 7 years ago

sudo /config/scripts/renew.acme.sh -d my.domain.com -i eth1

I have eth1 as my main WAN.

hulu1522 commented 7 years ago

So I got it working... I'm sorry for the issue. My ISP is connected to eth1 but it is a PPPoE connection. After changing the command to use pppoe0 it worked just fine. Thanks again for this awesome integration for the EdgeRouter.

j-c-m commented 7 years ago

Good to hear, the script should probably error when it can't determine the WANIP. What does this display when executed on your configuration?

ip addr show eth1 | grep "inet\b" | awk '{print $2}' | cut -d/ -f1
j-c-m commented 7 years ago

Added check 06358a4d59a0670b81542c6badb8c3a61ae621f8

hulu1522 commented 7 years ago

@j-c-m

Here is the output of the command. I split it into each element to see where the output came from. My ISP is DSL with PPPoE.

eve@ER-Main:~$ ip addr show eth1 | grep "inet\b" | awk '{print $2}' | cut -d/ -f1
eve@ER-Main:~$ ip addr show eth1 | grep "inet\b" | awk '{print $2}'
eve@ER-Main:~$ ip addr show eth1 | grep "inet\b"
eve@ER-Main:~$ ip addr show eth1
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default
    link/ether 24:a4:3c:05:b6:d6 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::26a4:3cff:fe05:b6d6/64 scope link
       valid_lft forever preferred_lft forever