Cant create SSL certificate for Serbian cyrilic domian

1

Hi all!
Can anyone clarify how to correctly create SSL self-signed (Let’s Encrypt) certtificate
for cyrilic domains?
I have created one using cyrilic name (not using punycode name)
and its worked well but it doesnt have SSL certificate and I cant install it in Hestia admin and in CLI .

In Hestia admin I have got the error:
Error: Let’s Encrypt validation status 400 (клење.срб). Details: 403:"2606:4700:3034::ac43:cc12: Invalid response from http://www.клење.срб/: \"\\n\\n<html class=\\\“fontyourface xn__80akarf3l7bxn__90a3ac-html\\\” lang=\\\“en\\\” dir=\\\“ltr\\\” prefix=\\\“og: https://ogp.me/ns#\\\“\””

CLI test:
v-add-letsencrypt-domain user клење.срб
Error: Let’s Encrypt validation status 400 (клење.срб). Details: 403:“2606:4700:3036::6815:4282: Invalid response from http://клење.срб/: "\n\n<html class=\“fontyourface клење.औ90aक3ac\” lang=\“en\” dir=\“ltr\” prefix=\"og: https://ogp.me/ns#\\\“\””

How can I create the certificate?

ps:
Is it necessary t create domain using punycode domain name enstead of cyrilic?

2

Disable ipv6

3

I’ve turned off but it doesnt take effect :frowning:

image
image1089×309 18.1 KB

4

Well, I’ve fixed the issue by
changing the domain SSL cert to Flexible on CF
and add redirection to https

5

Have a look at the docs: SSL Certificates | Hestia Control Panel

Maybe it’s even better to switch on Cloudflare Origin CA’s: SSL Certificates | Hestia Control Panel

1 Like
6

Please don’t do that. You expose all of your traffic in in unencrypted plaintext in thay mode. The Cloudflare Origin CA certificate recommendation is an excellent way to protect the traffic between the Cloudflare edge and your HestiaCP server.

Just remember that you cannot use those certificates with the direct connections required by services such as email.

7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.