Forum

Let's Encrypt -HTTP error while registering account

chapchap70
2 June 2016, 23:21
I ran the letsencrypt script and it generated the account.key but I keep getting this:
# /mnt/sdb1/letsencrypt/letsencrypt register
Registering account.
- HTTP error while registering account.

One thing I don't understand is that I can't find anything in my access or error logs at the times I run the script. My error logs file are actually empty. I commented out all lines having to do with max size, checked to see if my first VirtualHost is online. It is a small static site. Here is my configuration file... I am running v10.2
# Hiawatha main configuration file (10.2)
#

# VARIABLES
# With 'set', you can declare a variable. Make sure the name of the
# variable doesn't conflict with any of the configuration options.
# The variables are case-sensitive and cannot be redeclared.
#
set LOCALHOST = 127.0.0.0/8


# GENERAL SETTINGS

ServerId = nobody
#ConnectionsTotal = 1000
#ConnectionsPerIP = 25
SystemLogfile = /var/log/hiawatha/system.log
GarbageLogfile = /var/log/hiawatha/garbage.log


# BINDING SETTINGS
# A binding is where a client can connect to.
#
Binding {
Port = 80
}

#Binding {
# Port = 443
# TLScertFile = .pem
# Interface = 127.0.0.1
# MaxRequestSize = 2048
# TimeForRequest = 30
#}


# BANNING SETTINGS
# Deny service to clients who misbehave.

BanOnGarbage = 300
#BanOnMaxPerIP = 60
#BanOnMaxReqSize = 300
KickOnBan = yes
RebanDuringBan = yes


# COMMON GATEWAY INTERFACE (CGI) SETTINGS
# These settings can be used to run CGI applications.

CGIhandler = /opt/lampp/bin/perl:pl
CGIhandler = /opt/lampp/bin/php-cgi:php
#CGIhandler = /usr/bin/python:py
#CGIhandler = /usr/bin/ruby:rb
#CGIhandler = /usr/bin/ssi-cgi:shtml
CGIextension = cgi

#FastCGIserver {
# FastCGIid = PHP7
# ConnectTo = /var/lib/hiawatha/php-fcgi.sock
# Extension = php
#}


# URL TOOLKIT
# This URL toolkit rule was made for the Banshee PHP framework,
# which can be downloaded from http://www.banshee-php.org/

UrlToolkit {
ToolkitID = banshee
RequestURI isfile Return
Match ^/(css|files|fonts|images|js)($|/) Return
Match ^/(favicon.ico|robots.txt)$ Return
Match [^?]*(\?.*)? Rewrite /index.php$1
}


# DIRECTORY SETTINGS
# You can specify some settings per directory.

Directory {
DirectoryID = static
Path = /css, /fonts, /images, /js
ExpirePeriod = 2 weeks
}

Directory {
DirectoryID = files
Path = /files
ShowIndex = yes
StartFile = index.html
ExecuteCGI = no
}


# DEFAULT WEBSITE
# It is wise to use your IP address as the hostname of the default website
# and give it a blank webpage. By doing so, automated webscanners won't find
# your possible vulnerable website.
#
Hostname = 127.0.0.1
WebsiteRoot = /root/Web-Server
StartFile = blank.html
AccessLogfile = /var/log/hiawatha/access.log
ErrorLogfile = /var/log/hiawatha/error.log



# VIRTUAL HOSTS
# Use a VirtualHost section to declare the websites you want to host.
#
VirtualHost {
Hostname = globalwarmingllc.com
Hostname = *.globalwarmingllc.com
WebsiteRoot = /var/www/globalwarmingllc/public
StartFile = index.html
AccessLogfile = /var/www/globalwarmingllc/log/access.log
ErrorLogfile = /var/www/globalwarmingllc/log/error.log
# PreventXSS = yes
# PreventCSRF = yes
CustomHeader = Vary: Accept-Encoding
CustomHeader = X-Frame-Options: sameorigin
UseDirectory = static, files
}
Hugo Leisink
4 June 2016, 15:12
Can you reach the server as specified by LE_CA_HOSTNAME in letsencrypt.conf? You should be able to connect to port 80 of that server.
chapchap70
4 June 2016, 15:56
It looks like it redirects me to https This is what the page says when I view it in my browser.


This is an ACME Certificate Authority running Boulder.

This is a programmatic endpoint, an API for a computer to talk to. You should probably be using a specialized client to utilize the service, and not your web browser. See https://letsencrypt.org/ for help.

If you're trying to use this service, note that the starting point, the directory, is available at this URL: https://acme-staging.api.letsencrypt.org/directory.
Hugo Leisink
4 June 2016, 15:58
But can you also reach that server from the machine you use to run the letsencrypt script? Somehow, the script is not able to.
chapchap70
4 June 2016, 16:08
This is the machine... I'll try running it again. Maybe there was a problem on their end a couple of days ago?
chapchap70
4 June 2016, 16:19
Deleted other key and ran again. Same thing..

# /mnt/sdb1/letsencrypt/letsencrypt register
Generating account key.
Registering account.
- HTTP error while registering account.
#

If I try to connect to the production one with my browser, it gives me an error and doesn't connect.
Hugo Leisink
4 June 2016, 16:20
Looks like you have some sort of connection issue. Solve that before using the script.
chapchap70
4 June 2016, 16:57
I just registered the account by rolling back my PHP to 5.6.21-0 from 7.0.4-0 (Xampp)

Thanks for your help.
Hugo Leisink
4 June 2016, 16:58
Ah, that's the issue. Thanks for the feedback. I don't have access to a machine with PHP7 yet.
chapchap70
5 June 2016, 22:04
My certificate gets me an "A" on https://www.ssllabs.com For those that run small sites using a residential service/router, don't forget to port forward :443. I forgot I didn't do that years ago.
This topic has been closed.