Issue with generating keys for Letsencrypt

R2D2 · November 7, 2017, 6:14am

Yesterday i did an fresh install on my Pi 3 with Hass.io on it. Everything is working properly and Hue lights, Z-wave adapter are discovered… works like a charm.

However i have an issue with letsencrypt and generating the SSL keys.

What i did,

Opened up port 80 and 443 and forwarded them to my Pi with Hassio
Installed the LetsEncrypt addon
Provided the following details

    {
  "challenge": "https",
  "email": "[email protected]",
  "domains": [
    "xxxxx.vout.nl"
  ],
  "certfile": "fullchain.pem",
  "keyfile": "privkey.pem"
}

Started the addon and watched the log output

The output is as follows:

starting version 3.2.2
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Obtaining a new certificate
Performing the following challenges:
tls-sni-01 challenge for [domain as in config]
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. [domain as in config] (tls-sni-01): urn:acme:error:tls :: The server experienced a TLS error during domain verification :: remote error: tls: alert(112)
IMPORTANT NOTES:

The following errors were reported by the server:
Domain: [domain as in config]
Type: tls
Detail: remote error: tls: alert(112)
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A record(s) for that domain
contain(s) the right IP address. Additionally, please check that
you have an up-to-date TLS configuration that allows the server to
communicate with the Certbot client.

I can access my install through port 80… that’s all working fine (http://subdomain.domain.com/) so it seems like the ports are open on the router and directing incoming traffic to the HassIO install is also working. However i can’t get pass the error above for SSL.

Anyone with an suggestion?

lwasylow · November 7, 2017, 7:34am

Redirect port 443 for installation time to haas machine

R2D2 · November 7, 2017, 7:42am

That has been done but it still doesn’t work…

Open up port 80 on router en direct traffic on it to the IP address and port 80 of Hass.io
Open up port 443 on router en direct traffic on it to the IP address and port 443 of Hass.io

I just thought about the following… because i’m doing something wrong else it should work Shouldn’t it be as below?

Open up port 80 on the router and direct it to port 8123 on the Hass.io installation
Open up port 443 on the router and direct it to 8123 on the Hass.io installation