Sign in or sign up before continuing. Don't have an account yet? Register now to get started.
Register now

Acme::Client::Error::Unauthorized: Account creation on ACMEv1 is disabled. Please upgrade your ACME client

Summary

My gitlab dont want to update the SSL Cert via Letencrypt processus ( Ackme v2 not found )

Steps to reproduce

root@crx-git01 ~ # sudo gitlab-ctl pg-upgrade

What is the current bug behavior?

My https is down : https://git.crx.cloud/

What is the expected correct behavior?

Relevant logs

Relevant logs
root@crx-git01 ~ # sudo gitlab-ctl reconfigure
Starting Chef Client, version 13.6.4
resolving cookbooks for run list: ["gitlab"]
Synchronizing Cookbooks:
  - postgresql (0.1.0)
  - registry (0.1.0)
  - consul (0.1.0)
  - letsencrypt (0.1.0)
  - runit (4.3.0)
  - gitlab (0.0.1)
  - crond (0.1.0)
  - nginx (0.1.0)
  - gitaly (0.1.0)
  - acme (3.1.0)
  - redis (0.1.0)
  - package (0.1.0)
  - mattermost (0.1.0)
  - compat_resource (12.19.1)
Installing Cookbook Gems:
Compiling Cookbooks...
...
    Compiled Resource:
    ------------------
    # Declared in /opt/gitlab/embedded/cookbooks/cache/cookbooks/letsencrypt/recipes/http_authorization.rb:3:in `from_file'
letsencrypt_certificate("git.crx.cloud") do
  action [:create]
  default_guard_interpreter :default
  declared_type :letsencrypt_certificate
  cookbook_name "letsencrypt"
  recipe_name "http_authorization"
  fullchain "/etc/gitlab/ssl/git.crx.cloud.crt"
  key "/etc/gitlab/ssl/git.crx.cloud.key"
  alt_names []
  cn "git.crx.cloud"
end

System Info:
------------
chef_version=13.6.4
platform=debian
platform_version=9.9
ruby=ruby 2.5.3p105 (2018-10-18 revision 65156) [x86_64-linux]
program_name=/opt/gitlab/embedded/bin/chef-client
executable=/opt/gitlab/embedded/bin/chef-client

Running handlers: There was an error running gitlab-ctl reconfigure:

letsencrypt_certificate[git.crx.cloud] (letsencrypt::http_authorization line 3) had an error: Acme::Client::Error::Unauthorized: acme_certificate[staging] (/opt/gitlab/embedded/cookbooks/cache/cookbooks/letsencrypt/resources/certificate.rb line 20) had an error: Acme::Client::Error::Unauthorized: Account creation on ACMEv1 is disabled. Please upgrade your ACME client to a version that supports ACMEv2 / RFC 8555. See https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430 for details.

Running handlers complete Chef Client failed. 4 resources updated in 16 seconds ...

Details of package version

Provide the package version installation details
||/ Name                                 Version                 Architecture            Description
+++-====================================-=======================-=======================-=============================================================================
ii  gitlab-ce                            11.11.8-ce.0            amd64                   GitLab Community Edition (including NGINX, Postgres, Redis)
un  gitlab-ee                                                                (no description available)

Environment details

  • Operating System: DEBIAN 9.9 OS / XEN VIRTUAL MACHINE.

Configuration details

Provide the relevant sections of `/etc/gitlab/gitlab.rb`

external_url 'https://git.crx.cloud' gitlab_rails['manage_backup_path'] = true gitlab_rails['backup_path'] = "/dataglusterfs_mount/git.crx.cloud/backup" gitlab_rails['backup_archive_permissions'] = 0600 gitlab_rails['backup_keep_time'] = 1204800 gitlab_rails['smtp_enable'] = true gitlab_rails['smtp_address'] = "192.168.x.x" gitlab_rails['smtp_port'] = 25 gitlab_rails['smtp_domain'] = "crx.cloud" gitlab_rails['smtp_enable_starttls_auto'] = false gitlab_rails['smtp_tls'] = false letsencrypt['enable'] = true letsencrypt['contact_emails'] = ['webmaster@crx.cloud'] # This should be an array of email addresses to add as contacts letsencrypt['group'] = 'root' letsencrypt['key_size'] = 2048 letsencrypt['owner'] = 'root' letsencrypt['wwwroot'] = '/var/opt/gitlab/nginx/www' letsencrypt['auto_renew'] = true letsencrypt['auto_renew_hour'] = 12 letsencrypt['auto_renew_day_of_month'] = "*/7"

Edited Aug 31, 2019 by Bastien-admincrx CRXDXPROJECT
Assignee Loading
Time tracking Loading