Re: letskencrypt with OpenBSD 6.0 Resend
This is a re-send. I sent it last night but it hasn't shown up yet. Ed On 27 Sep 2016 at 15:19, Ed D. wrote: > On 27 Sep 2016 at 7:39, Stuart Henderson wrote: > > > On 2016-09-27, Ed D. wrote: > > > I'm running OpenBSD 6.0-stable (GENERIC.MP) > > > AMD64. > > > I have the > > > letskencrypt-0.1.7 privilege-separated letsencrypt client > > > package installed. > > > > You need the newer version that is in -stable ports - 0.1.7 doesn't > > work any more. > > > Thanks for the info. > I didn't know. > I just got letskencrypt-0.1.10 > from ports, and will begin figuring out > how to set up httpd for challenges. > > I just upgraded from OpenBSD 5.1 and > have to get used to OpenSMTPD and httpd. > Thanks Again, Ed > Hi, Was able to get everything working. I have the certificates loaded and working with my webserver. My PROBLEM? In trying to get the cron job to keep my certificates valid, I'm not able to find a command that will reload httpd without error. First off, httpd -n shows setup is OK. I've tried and all fail, # /etc/rc.d/httpd reload httpd(failed) # # /etc/rc.d/httpd restart httpd(failed) # # rcctl -d reload httpd doing _rc_parse_conf doing _rc_quirks httpd_flags > -v -v -v -v < doing _rc_parse_conf /var/run/rc.d/httpd doing _rc_quirks httpd doing rc_check (failed) # # rcctl -d restart httpd doing _rc_parse_conf doing _rc_quirks httpd_flags > -v -v -v -v < doing _rc_parse_conf /var/run/rc.d/httpd doing _rc_quirks doing _rc_parse_conf doing _rc_quirks httpd_flags > -v -v -v -v < doing _rc_parse_conf /var/run/rc.d/httpd doing _rc_quirks doing rc_check doing _rc_parse_conf doing _rc_quirks httpd_flags > -v -v -v -v < doing _rc_parse_conf /var/run/rc.d/httpd doing _rc_quirks doing rc_check httpd doing rc_pre server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem server_tls_load_keypair: using certificate /etc/ssl/letsencrypt/fullchain.pem server_tls_load_keypair: using private key /etc/ssl/letsencrypt/private/privkey.pem configuration OK doing rc_start doing _rc_wait start doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing rc_check doing _rc_rm_runfile (failed) # Does anybody have any idea what I'm not seeing? Thanks, Ed ___ Openbsd-newbies mailing list Openbsd-newbies@sfobug.theapt.org http://mailman.theapt.org/listinfo/openbsd-newbies
Re: letskencrypt with OpenBSD 6.0 Resend
Hi Ed, Impossible to tell without looking at your /etc/httpd.conf file. Regards, Raf On Mon, Oct 03, 2016 at 06:36:52PM BST, Ed D. wrote: > This is a re-send. > I sent it last night but it hasn't shown up yet. > Ed > > On 27 Sep 2016 at 15:19, Ed D. wrote: > > > On 27 Sep 2016 at 7:39, Stuart Henderson wrote: > > > > > On 2016-09-27, Ed D. wrote: > > > > I'm running OpenBSD 6.0-stable (GENERIC.MP) > > > > AMD64. > > > > I have the > > > > letskencrypt-0.1.7 privilege-separated letsencrypt client > > > > package installed. > > > > > > You need the newer version that is in -stable ports - 0.1.7 doesn't > > > work any more. > > > > > Thanks for the info. > > I didn't know. > > I just got letskencrypt-0.1.10 > > from ports, and will begin figuring out > > how to set up httpd for challenges. > > > > I just upgraded from OpenBSD 5.1 and > > have to get used to OpenSMTPD and httpd. > > Thanks Again, Ed > > > Hi, > Was able to get everything working. > I have the certificates loaded and working with > my webserver. > My PROBLEM? > In trying to get the cron job to keep my certificates > valid, I'm not able to find a command that will > reload httpd without error. > > First off, httpd -n shows setup is OK. > > I've tried and all fail, > # /etc/rc.d/httpd reload > httpd(failed) > # > > # /etc/rc.d/httpd restart > httpd(failed) > # > > # rcctl -d reload httpd > doing _rc_parse_conf > doing _rc_quirks > httpd_flags > -v -v -v -v < > doing _rc_parse_conf /var/run/rc.d/httpd > doing _rc_quirks > httpd > doing rc_check > (failed) > # > > # rcctl -d restart httpd > doing _rc_parse_conf > doing _rc_quirks > httpd_flags > -v -v -v -v < > doing _rc_parse_conf /var/run/rc.d/httpd > doing _rc_quirks > doing _rc_parse_conf > doing _rc_quirks > httpd_flags > -v -v -v -v < > doing _rc_parse_conf /var/run/rc.d/httpd > doing _rc_quirks > doing rc_check > doing _rc_parse_conf > doing _rc_quirks > httpd_flags > -v -v -v -v < > doing _rc_parse_conf /var/run/rc.d/httpd > doing _rc_quirks > doing rc_check > httpd > doing rc_pre > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > server_tls_load_keypair: using certificate > /etc/ssl/letsencrypt/fullchain.pem > server_tls_load_keypair: using private key > /etc/ssl/letsencrypt/private/privkey.pem > configuration OK > doing rc_start > doing _rc_wait start > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing rc_check > doing _rc_rm_runfile > (failed) > # > > Does anybody have any idea what I'm not seeing? > Thanks, Ed > ___ > Openbsd-newbies mailing list > Openbsd-newbies@sfobug.theapt.org > http://mailman.theapt.org/listinfo/openbsd-newbies ___ Openbsd-newbies mailing list Openbsd-newbies@sfobug.theapt.org http://mailman.theapt.org/listinfo/openbsd-newbies
Re: letskencrypt with OpenBSD 6.0 Resend
Hi Raf,
Thanks for the reply.
My /etc/httpd.conf is at the bottom.
Thanks, Ed
On 3 Oct 2016 at 19:01, Raf Czlonka wrote:
Hi Ed,
Impossible to tell without looking at your /etc/httpd.conf file.
Regards,
Raf
On Mon, Oct 03, 2016 at 06:36:52PM BST, Ed D. wrote:
> This is a re-send.
> I sent it last night but it hasn't shown up yet.
> Ed
>
> On 27 Sep 2016 at 15:19, Ed D. wrote:
>
> > On 27 Sep 2016 at 7:39, Stuart Henderson wrote:
> >
> > > On 2016-09-27, Ed D. wrote:
> > > > I'm running OpenBSD 6.0-stable (GENERIC.MP)
> > > > AMD64.
> > > > I have the
> > > > letskencrypt-0.1.7 privilege-separated letsencrypt client
> > > > package installed.
> > >
> > > You need the newer version that is in -stable ports - 0.1.7
> > > doesn't work any more.
> > >
> > Thanks for the info.
> > I didn't know.
> > I just got letskencrypt-0.1.10
> > from ports, and will begin figuring out
> > how to set up httpd for challenges.
> >
> > I just upgraded from OpenBSD 5.1 and
> > have to get used to OpenSMTPD and httpd.
> > Thanks Again, Ed
> >
> Hi,
> Was able to get everything working.
> I have the certificates loaded and working with
> my webserver.
> My PROBLEM?
> In trying to get the cron job to keep my certificates
> valid, I'm not able to find a command that will
> reload httpd without error.
>
> First off, httpd -n shows setup is OK.
>
> I've tried and all fail,
> # /etc/rc.d/httpd reload
> httpd(failed)
> #
>
> # /etc/rc.d/httpd restart
> httpd(failed)
> #
>
> # rcctl -d reload httpd
> doing _rc_parse_conf
> doing _rc_quirks
> httpd_flags > -v -v -v -v <
> doing _rc_parse_conf /var/run/rc.d/httpd
> doing _rc_quirks
> httpd
> doing rc_check
> (failed)
> #
>
> # rcctl -d restart httpd
> doing _rc_parse_conf
> doing _rc_quirks
> httpd_flags > -v -v -v -v <
> doing _rc_parse_conf /var/run/rc.d/httpd
> doing _rc_quirks
> doing _rc_parse_conf
> doing _rc_quirks
> httpd_flags > -v -v -v -v <
> doing _rc_parse_conf /var/run/rc.d/httpd
> doing _rc_quirks
> doing rc_check
> doing _rc_parse_conf
> doing _rc_quirks
> httpd_flags > -v -v -v -v <
> doing _rc_parse_conf /var/run/rc.d/httpd
> doing _rc_quirks
> doing rc_check
> httpd
> doing rc_pre
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> server_tls_load_keypair: using certificate
> /etc/ssl/letsencrypt/fullchain.pem
> server_tls_load_keypair: using private key
> /etc/ssl/letsencrypt/private/privkey.pem
> configuration OK
> doing rc_start
> doing _rc_wait start
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing rc_check
> doing _rc_rm_runfile
> (failed)
> #
>
> Does anybody have any idea what I'm not seeing?
> Thanks, Ed
> ___
# httpd -n
configuration OK
#
#
# cat httpd.conf
prefork 3
chroot "/var/www"
server "default" {
alias "www.domain1.com"
listen on 10.0.0.2 port 80
listen on 10.0.0.2 tls port 443
tls certificate "/etc/ssl/letsencrypt/ful
