Error 400 when running bncert-tool

kojo 2019-09-27 22:23:25 UTC #1

Keywords: WordPress Multisite - Other - Technical issue - Secure Connections (SSL/HTTPS)
bnsupport ID: abc97668-678c-90a4-d2cc-0acdb37de6d9
Description:
Whenever I try to install the SSL certificate on my AWS bitnami wordpress multisite server, I get the following error message:

An error occurred creating certificates with Let's Encrypt:

acme: Error -> One or more domains had a problem:
[mydomain.com] acme: error: 400 :: urn:ietf:params:acme:err
or:dns :: DNS
problem: SERVFAIL looking up A for mydomain.com, url:
[www.mydomain.com] acme: error: 400 :: urn:ietf:params:acme
:error:dns ::
DNS problem: SERVFAIL looking up A for www.mydomain.com, ur
l:

I have double checked all DNS records and everything is correct. At this point I clearly need help. Kindly assist.

kojo 2019-09-27 22:30:46 UTC #2

I just checked the website after runnig the bncert-tool and its down.
It was up before i run the bncert-tool, but now it's down.

gongomgra 2019-09-30 09:40:18 UTC #3

Hi @kojo,

Thanks for using Bitnami. I checked the bnsupport bundle but I don't see any modification done by the bncert tool. I see the error message below in the Apache log file instead

[Wed Sep 25 16:38:26.447781 2019] [proxy_fcgi:error] [pid 23261:tid 140579782391552] [client 154.160.6.2:18273] AH01071: Got error 'PHP message: PHP Warning:  implode(): Invalid arguments passed in /opt/bitnami/apps/wordpress/htdocs/wp-content/themes/thegem/inc/custom-css.php

Can you check the issues in that file and try to visit your website again? Apart from that, regarding the Let's Encrypt issue, can you check the bncert log file located at /tmp/bncert-*.log? What is the output of manually running lego by using the command below? Remember to replace the EMAIL-ADDRESS and DOMAIN placeholders with your actual values.

sudo /opt/bitnami/letsencrypt/lego --tls --email="EMAIL-ADDRESS" --domains="DOMAIN" --domains="www.DOMAIN" --path="/opt/bitnami/letsencrypt" run

Regards,
Gonzalo

kojo 2019-10-13 15:41:45 UTC #4

Hello Gonzola,

Irun the following command as directed:

sudo /opt/bitnami/letsencrypt/lego --tls --email="EMAIL-ADDRESS" --domains="DOMAIN" --domains="www.DOMAIN" --path="/opt/bitnami/letsencrypt" run

This was the output:

bitnami@ip-xxx-xxx-xxx-x:~$ sudo /opt/bitnami/letsencrypt/lego --tls --
email=“myemail@email.com” --domains="mydomain.com" --domains=
"www.mydomain.com" --path="/opt/bitnami/letsencrypt" run
2019/10/13 15:34:02 [INFO] [mydomain.com, www.mydomain.c
om] acme: Obtaining bundled SAN certificate
2019/10/13 15:34:03 [INFO] [mydomain.com] AuthURL: https://acme
-v02.api.letsencrypt.org/acme/authz-v3/762080180
2019/10/13 15:34:03 [INFO] [www.mydomain.com] AuthURL: https://
acme-v02.api.letsencrypt.org/acme/authz-v3/762080181
2019/10/13 15:34:03 [INFO] [mydomain.com] acme: use tls-alpn-01
solver
2019/10/13 15:34:03 [INFO] [www.mydomain.com] acme: use tls-alp
n-01 solver
2019/10/13 15:34:03 [INFO] [mydomain.com] acme: Trying to solve
TLS-ALPN-01
2019/10/13 15:34:04 [INFO] [www.mydomain.com] acme: Trying to s
olve TLS-ALPN-01
2019/10/13 15:34:04 Could not obtain certificates:
acme: Error -> One or more domains had a problem:
[mydomain.com] [mydomain.com] acme: error presenting tok
en: could not start HTTPS server for challenge -> listen tcp :443: bin
d: address already in use
[www.mydomain.com] [www.mydomain.com] acme: error presen
ting token: could not start HTTPS server for challenge -> listen tcp :
443: bind: address already in use
bitnami@ip-xxx-xxx-xxx-x:~$

Kindly assist.

gongomgra 2019-10-14 10:40:05 UTC #5

Hi @kojo,

You will need to stop the Apache service before manually running the lego command. Please do so by running the command below

sudo /opt/bitnami/ctlscript.sh stop apache

Next, run the lego command again. And when finished start the Apache service

sudo /opt/bitnami/ctlscript.sh start apache

Regards,
Gonzalo

kojo 2019-10-15 13:36:15 UTC #6

Thanks for the update Gonzalo,

This issue has been disturbing me for weeks and the client has been on my neck.

I just decided to use a different server altogether. My reason being that, aside bncert not working, the site wasnt accessible worldwide. Client complained that the site does not load on his network(isp) I checked and realised that some ISPs were not finding the server...with error : name_not_resolved.

I have tried severally to solve this issue but to no avail. Can you kindly let me know if there is any particular reason why a website will load fine on certain enternet service providers and will not load on other internet service providers?

kojo 2019-10-15 18:05:27 UTC #7

Update on previous comment. I created a new instance and migrated the old website to this new server. I havent tried the bncert tool yet, but at the moment the website is not accessible on all ISPs.

This is really strange.

Is there a way I can send the domain to you privately so you check it out for me? I'd appreciate that. Thank you.

gongomgra 2019-10-16 09:04:11 UTC #8

Hi @kojo,

DNS updates may take up to 48-72 hours to fully propagate world wide. That may be the explanation of the error you were getting using bncert tool about your domain and DNS

problem: SERVFAIL looking up A for mydomain.com, url:
[www.mydomain.com] acme: error: 400 :: urn:ietf:params:acme
:error:dns ::

Please note the errors above are not related to the bncert tool but to lego, which is used by the bncert tool to generate the SSL certificates.

Then you got a different error using the lego binary manually. That erorr said that port 443 was in use, that's why I suggested you to stop Apache, run the lego tool again and then start the Apache service again.

Apart from the above, I just checked the domain name present in your bnsupport bundle in the whatsmydns tool for checking DNS and it is true that some DNS servers do not have the information of your site. We recommend you to check with DNS service provider about it. You can check the DNS propagation of your domain in the link below

https://www.whatsmydns.net

Regards,
Gonzalo

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!