Welcome Guest, Not a member yet? Register   Sign In
Let's Encrypt Verification & CodeIgniter
#1
Question 
(This post was last modified: 02-08-2022, 11:00 AM by Gary.)

I've recently been experimenting with automated certificate renewals (having previously done it manually).

What I've found is that on websites not created using CI, the whole process is painless.  However, when trying to implement it on my (still under development) CI site, what worked elsewhere fails, with a couple of complaints... the most significant that the Let's Encrypt server can't get verify the secret pushed into the website's directory).

I've not spent a lot of time on it yet, but, as interaction for the Let's Encrypt cert renewal verification is all done over HTTP, as an initial hack, I have tried to disable the automatic redirection to the HTTPS version of the site (by Apache) and also the request upgrade to HTTPS in the CI setup, but that didn't appear to make much difference (yes, Apache was restarted).

I suspect there's also issues with the CI routing that may be impeding the verification step of Let's Encrypt (?).

As this is looking like it's going to become one of those multiple-day-wasting problems, I was hoping that someone with a better grip on Let's Encrypt's interaction with CI could please give me some pointers?

Thanks.
Reply
#2

I think this is probably what you're looking for.  It's talking about CakePHP, but the idea should be the same.

https://stackoverflow.com/a/41391957/2844703
Reply
#3

(This post was last modified: 02-17-2022, 03:39 PM by Gary.)

Thanks for the link, BilltheCat.

Although I already had something similar to what is suggested in the discussion in your link, I found one of the posts had a better and tidier version, thank you.

The problem appeared to end up being a (long-time identified, but still unfixed) occasional occurrence that has a work-around (and nothing to do with external access to the secret, which is the complaint given when it fails... something that bent my brain, because the secret was accessible from outside, even using a browser).

For anyone with the same problem, this discussion may be of interest : https://community.letsencrypt.org/t/lets...rl/81853/3
Reply




Theme © iAndrew 2016 - Forum software by © MyBB