Jump to content

[Solved] Accidentally removed .well-known - what now?


cprn

Recommended Posts

I was trying to remove all self-signed certificates to get the ones from AutoSSL and went too far. All my .well-known/pki-validation/ directories are empty. I know they should contain Domain Validation Codes (DVCs) for all my domains but, well, they are gone.

  1. should DVC be in content of those missing .txt files or is that in the file name?
  2. if it's the latter, is it enough to recreate empty files with the same names?
Log for the AutoSSL run for “cprn”: Thursday, May 17, 2018 3:18:26 PM GMT-0400 (cPanel (powered by Comodo))
3:18:26 PM This system has AutoSSL set to use “cPanel (powered by Comodo)”.
3:18:26 PM Checking websites for “cprn” …
3:18:27 PM The website “flasktest.lue.heliohost.org”, owned by “cprn”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
3:18:27 PM The website “lue.heliohost.org”, owned by “cprn”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
3:18:28 PM WARN The domain “flasktest.lue.heliohost.org” failed domain control validation: The system queried for a temporary file at “<a href="http://flasktest.lue.heliohost.org/.well-known/pki-validation/F99E034902E1D17B7AE426CDFC0ED895.txt">http://flasktest.lue.heliohost.org/.well-known/pki-validation/F99E034902E1D17B7AE426CDFC0ED895.txt</a>”, but the web server responded with the following error: 404 (NOT FOUND). A <abbr title="Domain Name System">DNS</abbr> or web server misconfiguration may exist.
3:18:29 PM WARN The domain “www.flasktest.lue.heliohost.org” failed domain control validation: The system queried for a temporary file at “<a href="http://www.flasktest.lue.heliohost.org/.well-known/pki-validation/4C6960700149800E25BD7A6742CF534E.txt">http://www.flasktest.lue.heliohost.org/.well-known/pki-validation/4C6960700149800E25BD7A6742CF534E.txt</a>”, but the web server responded with the following error: 404 (NOT FOUND). A <abbr title="Domain Name System">DNS</abbr> or web server misconfiguration may exist.
3:18:34 PM WARN The domain “lue.heliohost.org” failed domain control validation: The system queried for a temporary file at “<a href="http://lue.heliohost.org/.well-known/pki-validation/F6D35C2A41DF87CE2781CD15A3DE57B0.txt">http://lue.heliohost.org/.well-known/pki-validation/F6D35C2A41DF87CE2781CD15A3DE57B0.txt</a>”, but the web server responded with the following error: 404 (NOT FOUND). A <abbr title="Domain Name System">DNS</abbr> or web server misconfiguration may exist.
3:18:36 PM WARN The domain “www.lue.heliohost.org” failed domain control validation: The system queried for a temporary file at “<a href="http://www.lue.heliohost.org/.well-known/pki-validation/2682D3C4E810E7EDB8FD838A5FBBC1FF.txt">http://www.lue.heliohost.org/.well-known/pki-validation/2682D3C4E810E7EDB8FD838A5FBBC1FF.txt</a>”, but the web server responded with the following error: 404 (NOT FOUND). A <abbr title="Domain Name System">DNS</abbr> or web server misconfiguration may exist.
3:18:39 PM WARN The domain “cpanel.lue.heliohost.org” failed domain control validation: The system queried for a temporary file at “<a href="http://cpanel.lue.heliohost.org/.well-known/pki-validation/AECB8F31BEDE645BADDA5290E5CAD916.txt">http://cpanel.lue.heliohost.org/.well-known/pki-validation/AECB8F31BEDE645BADDA5290E5CAD916.txt</a>”, but the web server responded with the following error: 404 (NOT FOUND). A <abbr title="Domain Name System">DNS</abbr> or web server misconfiguration may exist.
3:18:42 PM WARN The domain “webdisk.lue.heliohost.org” failed domain control validation: The system queried for a temporary file at “<a href="http://webdisk.lue.heliohost.org/.well-known/pki-validation/45FBD9E7B9F92B3600E1D1F6A38B72C5.txt">http://webdisk.lue.heliohost.org/.well-known/pki-validation/45FBD9E7B9F92B3600E1D1F6A38B72C5.txt</a>”, but the web server responded with the following error: 404 (NOT FOUND). A <abbr title="Domain Name System">DNS</abbr> or web server misconfiguration may exist.
3:18:42 PM WARN The domain “webmail.lue.heliohost.org” failed domain control validation: The system queried for a temporary file at “<a href="http://webmail.lue.heliohost.org/.well-known/pki-validation/4E71FE51AFF0DC0F3D1A16D7AD6C2188.txt">http://webmail.lue.heliohost.org/.well-known/pki-validation/4E71FE51AFF0DC0F3D1A16D7AD6C2188.txt</a>”, but the web server responded with the following error: 404 (NOT FOUND). A <abbr title="Domain Name System">DNS</abbr> or web server misconfiguration may exist.
3:18:42 PM The system will attempt to renew SSL certificates for the following websites:
3:18:42 PM lue.heliohost.org (mail.lue.heliohost.org)
3:18:46 PM The system has completed the AutoSSL check for “cprn”.
3:19:02 PM The queue contains a request for a certificate for “cprn”’s website “lue.heliohost.org”. The system last polled for this certificate at May 17, 2018, 7:18:46 PM UTC. The next poll will be no earlier than May 17, 2018, 7:23:46 PM UTC.
Link to comment
Share on other sites

They should recreate themselves when the autossl runs. I re-ran it after the htacess fix and it still throws a 404 error.

 

I'm not sure why these validation files aren't creating themselves. Let see if Krydos knows,

Link to comment
Share on other sites

As is usually the case, autossl is running perfectly. The problem was his .htaccess was redirecting all traffic to the /lue/ directory. The optimal solution is to write better rules so queries to the .well-known directory aren't messed with. As a temporary fix I just renamed the .htaccess to .htaccess-old and now it works.

  • Like 1
Link to comment
Share on other sites

[...] The problem was his .htaccess was redirecting all traffic to the /lue/ directory. [...]

 

 

Crap, I thought adding exception for .well-known directory fixed that:

RewriteRule ^\.well-known/.* - [L]

Thank you very much for solving this, I'll make sure to correct the rules.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
×
×
  • Create New...