LetsEncrypt error renew

NethServer Version: NethServer 7.8.2003
Module: LetsEncrypt

Hi
i have a problem for the renew certificate but i’m not understand error

https://pastebin.com/3jpGKZym

Thank you very mutch

Your server is not fully reachable over port 80 (HTTP), I get a “403 Forbidden” error. HTTPS is working but HTTP is needed for Letsencrypt. Maybe a port forward is missing?

From the documentation:

requesting a new Let’s Encrypt [1] certificate. This is possible if the following requirements are met:

  1. The server must be reachable from outside at port 80. Make sure your port 80 is open to the public Internet (you can check with sites like [2]);
  2. The domains that you want the certificate for must be public domain names associated to server own public IP. Make sure you have public DNS name pointing to your server (you can check with sites like [3]).

Thank you for respond

the nat 80 and 443 is enabled

I get following error browsing to your server at port 80:

1 Like

Yes bat the problem is not nat on router because respond nethserver and request ssl connection

reason: SSL connection required

the problem is this my file /etc/httpd/conf.d/bh_reverse.conf

SSLProxyEngine on

ProxyPass: guacamole

Description:

ProxyPass /bh/ http://192.168.0.28:8000/ flushpackets=on
ProxyPassReverse /bh/ http://192.168.0.28:8000/
SSLRequireSSL

ProxyPass /bh/ ws://192.168.0.28:8000/websocket-tunnel
ProxyPassReverse /bh/ ws://192.168.0.28:8000/websocket-tunnel
<Location /websocket-tunnel>

When browsing IP or the mail01 domain at HTTP I get the 403 Forbidden error so it seems the default page is not setup correctly.
The cloudoe domain redirects to HTTPS, this seems working.

Are there .htaccess files in the default html dir?

ls -lisa /var/www/html/

Please share your httpd config:

config show httpd

now function if disable my file /etc/httpd/conf.d/bh_reverse.conf … i think error my fle sorry and thank youu

1 Like

Thank you very mutch Markus
The certificate is update

1 Like