DNS einstellungen sollten stimmen. Auf dem Server lief vorher Windows Server 2019 mit IIS10 und Lets Encrypt hatte auch keine Probleme gemacht.
Ich poste gleichmal einen Screenshot der DNS records.
Einmal ein Auszug aus der"SSL-maintenance.log"
Code: Select all
[11-Oct-2019 01:29:01] INFO --> starting ssl certification maintenance
[11-Oct-2019 01:29:01] INFO --> checking (normal) SSL/TLS certificates
[11-Oct-2019 01:29:01] INFO --> check certificate "[ID 1]"
[11-Oct-2019 01:29:01] INFO --> certificate name is "default"
[11-Oct-2019 01:29:01] INFO --> certificate is valid until 2029-10-08 01:11:50 (3649 days left)
[11-Oct-2019 01:29:01] INFO --> checking lets encrypt certificates
[11-Oct-2019 01:29:01] INFO --> remove unused accounts / certificates
[11-Oct-2019 01:29:01] INFO --> check domain "srv1.reol.dev'
[11-Oct-2019 01:29:01] INFO --> certificate file does not exist
[11-Oct-2019 01:29:01] INFO --> renew cert
[11-Oct-2019 01:29:01] INFO --> Using certificate authority "https://acme-v01.api.letsencrypt.org".
[11-Oct-2019 01:29:02] INFO --> Using terms of service "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf".
[11-Oct-2019 01:29:02] INFO --> Start new account registration.
[11-Oct-2019 01:29:02] INFO --> Generate account key pair.
[11-Oct-2019 01:29:02] INFO --> Register account.
[11-Oct-2019 01:29:02] INFO --> Sending signed request to "/acme/new-reg".
[11-Oct-2019 01:29:03] ERROR --> a lets encrypt error occurred: Could not register account. Response: {"type":"urn:acme:error:unauthorized","detail":"Account creation on ACMEv1 is disabled. Please upgrade your ACME client to a version that supports ACMEv2 \/ RFC 8555. See https:\/\/community.letsencrypt.org\/t\/end-of-life-plan-for-acmev1\/88430 for details.","status":403}
[11-Oct-2019 01:29:03] INFO --> send notification to admin "keyadmin" (*** Zensiert c: ***)
[11-Oct-2019 01:29:03] INFO --> finished
====
Mann beachte den Error (3. Meldung von unten) Er konnte den Account nicht anlegen weil der CLient zu alt ist? o.O?
Edit://
Einmal ein Screenshot der DNS Records (Und ja die sehen sehr wüst aus... muss da mal aufräumen ^^)
