Let's encrypt certification: fails due to lowercasing?

[BilboTheHobbyist]

Hello,

I can’t get Let’s encrypt to work on my NodeJS web domain bellerad.io.

I asked the Let’s encrypt community, : HestiaCP panel: Let’s encrypt finalize bad status 403 - Help - Let’s Encrypt Community Support (letsencrypt.org). I was pointed out my server was rewriting an Url in lowercase. I tried to unroll these nginx parameters:

1. /etc/nginx,
2. /home/{my_user}/conf/web/bellerad.io
3. /home/{my_user}/hestiacp_nodejs_config/web/bellerad.io/

Unfortunately, I couldn’t find anything related to a rewrite. The only part that I thought related to my issue were the nginx.*.conf_letsencrypt file, but they only happen a string at the end of the .well-known/acme-challenge/ url, don’t they ?

Any clue ?

[sahsanu]

Hi @BilboTheHobbyist,

Show your nginx.conf.

cat /home/*/conf/web/bellerad.io/nginx.conf

[BilboTheHobbyist]

Here you are (couldn’t find a way to upload it )

server {
        listen XX.XX.XX.XX:80;
        server_name bellerad.io www.bellerad.io ma.bellerad.io;
        error_log /var/log/apache2/domains/bellerad.io.error.log error;

        include /home/XXX/hestiacp_nodejs_config/web/bellerad.io/nodejs-app.conf;

        location /error/ {
                alias /home/XXX/web/bellerad.io/document_errors/;
        }

        include /home/XXX/hestiacp_nodejs_config/web/bellerad.io/nodejs-app-fallback.conf;

        location ~ /\.ht {return 404;}
        location ~ /\.svn/ {return 404;}
        location ~ /\.git/ {return 404;}
        location ~ /\.hg/ {return 404;}
        location ~ /\.bzr/ {return 404;}
}

[sahsanu]

@BilboTheHobbyist

couldn’t find a way to upload it

It’s ok to copy and paste here but you didn’t paste all the contents of the file.

[BilboTheHobbyist]

During copy-pasting, I missed the last }. Apart from that, I can’t see anything else I missed (cf. screen capture).

[sahsanu]

Add this include before the first include (replace YourUser by the actual user):

include /home/YourUser/conf/web/bellerad.io/nginx.conf_*;

And then:

systemctl reload nginx

Once done you can test if you receive the right token instead of 404.

curl -ikL http://bellerad.io/.well-known/acme-challenge/TeSt

If this works, you should modify your template (tpl and stpl) to add the right includes and rebuild your site:

YourTemplate.tpl

include %home%/%user%/conf/web/%domain%/nginx.conf_*;

YourTemplate.stpl

include %home%/%user%/conf/web/%domain%/nginx.ssl.conf_*;

[BilboTheHobbyist]

@sahsanu

Add this include before the first include (replace YourUser by the actual user):

Brilliant ! I got me a certificate !

Thanks a lot , I’ll look into modifying my template, then.