Comments (4)
Found the beginning of the solution: if an IPv6 address is associated to your domain, certbot will try to use this address for the challenge step.
from certbot-zimbra.
do you still need help on this?
from certbot-zimbra.
Hi,
I'm not sure as I had to proceed to a manual renewal in order to fix the IPv6 issue. For the moment, I have never be able to automatically renew a certificate with the help of your development.
In fact, when an IPv6 AAAA entry is defined for a domain, LetsEncrypt tries to connect to the webserver through IPv6 (without IPv4 failover). This will require Zimbra Proxy (Nginx) to also serve pages to its IPv6 address. I do not know what it will imply in Nginx configuration and, thus, in the included patches to serve the ".well-known" folder.
For the moment, I need to fix an issue with my ISP who does not seem to be able to route IPv6 the right way. I'll get in touch as soon as I have more time to investigate this.
from certbot-zimbra.
My prod server runs on IPv6, so you don't need anything special to make it work. Just make sure Zimbra is working in both IPv4 and v6.
https://wiki.zimbra.com/wiki/Configuring_for_IP_V6
If you still need help reopen
from certbot-zimbra.
Related Issues (20)
- CN = DST Root CA X3 error 10 at 3 depth lookup:certificate has expired HOT 1
- cat: /etc/ssl/certs/2e5ac55d.0: No such file or directory Error! HOT 3
- TypeError: __str__ returned non-string (type Error) HOT 2
- Using --deploy-hook to avoid "cat: /etc/ssl/certs/2e5ac55d.0" error (closed as #140) HOT 9
- ERROR: Unable to validate certificate chain: /run/certbot-zimbra/certs-k1IwpQa5/cert.pem: O = Digital Signature Trust Co., CN = DST Root CA X3 error 10 at 3 depth lookup:certificate has expired OK HOT 3
- ERROR: Unable to validate certificate chain C = US, O = Internet Security Research Group, CN = ISRG Root X1 HOT 1
- Disable snapd systemd timers
- Verifying cert.pem zimbra_chain.pem error HOT 2
- Issue with renew HOT 5
- Deploy: keytool error: java.io.FileNotFoundException file not found error HOT 2
- find_additional_public_hostnames() enhancement for virtual hosts
- issue with EVP_PKEY_get1_RSA:expecting an rsa key:p_lib.c:287 HOT 5
- certbot-zimbra is failling to update certificates HOT 1
- No release version 0.7.13 HOT 6
- zmcertmgr ERROR chdir(/root) failed: Permission denied HOT 2
- ./install: line 102: declare: -n: invalid option HOT 1
- zmcertmgr error HOT 1
- Checking for dependencies... /bin/bash: /root/bin/zmcontrol: HOT 7
- Script hung on 1st install on NGIX patch HOT 2
- getting error 20 at 0 depth lookup: unable to get local issuer certificate
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from certbot-zimbra.