From: "Steven Levine" <ecs-isp@2rosenthals.com>
Message-ID: <6709ca61.6.mr2ice.fgrirsq@earthlink.net>
Date: Fri, 11 Oct 2024 17:01:21 -0800
To: "eCS ISP Mailing List" <ecs-isp@2rosenthals.com>
In-Reply-To: <list-11075097@2rosenthals.com>
Subject: Re: [eCS-ISP] HTTPS-Misery (for Steven)

In <list-11075097@2rosenthals.com>, on 10/12/24
   at 01:40 AM, "Massimo S." <ecs-isp@2rosenthals.com> said:

Hi Massimo,

>i still don't understand this

No problem.  This stuff was all new to us at one time.

>2024/10/12-01:33:15 hook_webmail started at 2024/10/12-01:33:15
>2024/10/12-01:33:15 method is begin
>2024/10/12-01:33:15 type is http-01
>2024/10/12-01:33:15 ident is webmail.mydomain.it
>2024/10/12-01:33:15 token is OQg2xEXcj39j6brHDmIDwj5V5mYY1_DOvU5DRDOnPh4

Not so good.  Notice that the hook did not create the token file.  You log
is missing a line like:

2024/08/25-19:58:36 Creating
D:\www\docs\mbopinion\.well-known\acme-challenge\pyyk1CI7afsiXskFrCC8RGVYS9t3qOvvQkRrL07rGaE

which reports that the token file has been successfully created.

My guess is you broke the script when you did your edits.  If think I see
what you did wrong.  You set docroot with

   docroot = 'X:\apache\htdocs\mywebsite\.well-known\acme-challenge'

You should have used

   docroot = 'X:\apache\htdocs\mywebsite'

docroot as the name implies is the name of the document root directory,
not the challenge directory.

The challenge directory name is set by

uacme-hook.cmd:88
  challengeDir = MakePath( docroot, '.well-known\acme-challenge')

I'm pretty sure the script reported that it could not access

  X:\apache\htdocs\mywebsite\.well-known\acme-challenge\.well-known\acme-challenge

and died and you ignored the error message or it scrolled by too fast for
you to read.

Run uacme with the -h and -v options and capture stdout and stderr to a
file:

  uacme -v -h uacme-hook.cmd issue webmail.mydomain.it >out.log 2>&1

Out.log should contain the error message you missed.

>i still find the acme-challenge dir empty

This is normal. The only reason the challenge directory will not be empty
is if uacme or the hook script crashes in such a way that the token file
is not deleted.

Your issue is a bit different.  The token file never got created because
you pointed challengeDir at a non-existant directory and the script died.

Steven

-- 
----------------------------------------------------------------------
"Steven Levine" <steve53@earthlink.net>  Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------