Comments (12)
I'm wondering if this could be something specific with the Sandcats server, but I guess the first question would be whether you've changed anything with your Sandstorm server in the past 90 days or so.
from sandstorm.
Well, The only thing that I've changed would be the hardware. I had been attempting to move it to a new server, but that ended up not working (I was trying for a while and asking for help on IRC), but I ended up just moving the old hard drive into a different server and splitting off my sandstorm from everything else. Could that have something to do with it even though nothing changed on the disk?
from sandstorm.
I am not sure. I am pretty sure it is just the file in the folder that keeps a token for Sandcats, but I am not positive. I can probably try to test fetching a Sandcats certificate myself later tonight to verify if the server is working correctly.
from sandstorm.
I can confirm the process works normally still as of right now. I was able to fetch my new certificate early and I am also using Sandcats. So it definitely seems like the issue is with your server not having the correct information to send the request.
I feel like if you moved the drive over as-is, the permissions should be right, but I'm trying to imagine a failure mode here for this. You should have a handful of files with names including "id_rsa" in /opt/sandstorm/var/sandcats, correct? (Do NOT share these files, they contain private keys.)
As a reference for myself for later, I am reading some of the following:
https://github.com/sandstorm-io/sandstorm/blob/master/install.sh#L1703 which is where the install script code for recovering a Sandcats domain is, it's pretty much all simple curl commands it's doing.
https://github.com/sandstorm-io/sandstorm/blob/master/acme-dns-01-sandcats/index.js#L86 is the function containing the error you're getting, which I am guessing is because it does not like your existing keys.
from sandstorm.
I don't have time to do any digging right now in my files, but I'm just spitballing here: could trying (and failing) to start Sandstorm on another system have changed something on Sandcats' side or Let's Encrypt's side that my current installation doesn't know about?
from sandstorm.
I don't feel like it should. But I feel like if you're concerned about that we could mimic the installation script's token recovery process using curl.
I'd be happy to try to set up some time when you do have time for a call and maybe a screenshare? I could compare with my own setup where necessary.
from sandstorm.
If you set up a new server and associated it with your Sandcats subdomain ("recovering" your domain in the installer, where it emails you a token), then that will mean the old server's credentials have been invalidated. That's probably what happened here.
To fix this, you'll need to copy the contents of /opt/sandstorm/var/sandcats
from your new server back to your old one (making sure to get the permissions set right), and then restart the old one. If you deleted this from the new server, you may need to set up another new server and do the recovery flow again, in order to get these files which you can then copy back to the old server.
from sandstorm.
Wow, am having problems getting SSL back up and running too!
Tho in my case, it seems to be hitting the letsencrypt service properly, just... doesn't want to apply correctly?
Log says:
Certificate was successfully renewed!
Exception in changedobserve callback: Error: Unknown id for changed: tlsKeys
at applyChange.changed (packages/minimongo/local_collection.js:725:15)
at runWithEnvironment (packages/meteor.js:1286:24)
at packages/meteor.js:1299:14
at packages/mongo/observe_multiplex.js:178:30
at Array.forEach (<anonymous>)
at Function._.each._.forEach (packages/underscore.js:139:11)
at Object.task (packages/mongo/observe_multiplex.js:172:9)
at Meteor._SynchronousQueue.SQp._run (packages/meteor.js:917:16)
at packages/meteor.js:894:12
sandstorm/gateway.c++:966: info: Loading TLS key into Gateway
And the admin panel doesn't know about the cert.
from sandstorm.
@frigginglorious That's very strange. I assume you had no recent changes to your network or setup? I would say maybe reboot your machine and retry in a few hours? Maybe a service issue with LE?
from sandstorm.
Thank you @ocdtrekkie sir. I have restarted it, https still down. Went to renew the cert from the admin panel. Seems successful, but https still doesn't work.
I probably won't get a chance to really dig into this til the new year. But I'll report back when I figure it out!
from sandstorm.
I'm really pondering, I bet the valid cert is in your Sandstorm server's files somewhere, since the error appears to just be loading it into the database. I'm wondering if so if we can use the manual import command to apply it manually.
from sandstorm.
from sandstorm.
Related Issues (20)
- Automatic Grain Backups HOT 1
- Etherpad grains not working after upgrade to 0.304 HOT 7
- Email delivery failure messages no such grain with email not configured HOT 12
- Scheduled Tasks view in Grain Settings appears broken HOT 3
- Installer and docs disagree on which port the incoming mail SMTP service lives on HOT 5
- Can't turn off app updates in App Sources panel HOT 3
- Building Sandstorm in a Debian Bullseye VM fails due to old golang-go version HOT 4
- "App market" shortcut leads to invalid URL HOT 2
- 404 on token setup page HOT 2
- Anything important worth saving at Google Groups? HOT 4
- able to Install Apps from https://apps.sandstorm.io/ But Grains were loading for ever HOT 22
- Perfect Configuration in Nginx for Sandstorm *.Wildcard Setup HOT 3
- docker compose unshare(CLONE_NEWPID) HOT 4
- Lengthy Powerbox requests cannot be read in full
- sandstorm.conf for non-standard TLD? HOT 6
- I used HTTPS-verified install, But open site ,it is blank? HOT 3
- Upgrade Meteor Testapp to Meteor 3.0 (Beta) HOT 7
- Preventing access to client local network? HOT 8
- Sandstorm Grains do not open anymore when logged in, websites CloudFlare error 520 HOT 25
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sandstorm.