# Certificate is expired

**URL:** <https://syncloud.discourse.group/t/certificate-is-expired/475>\
**Category:** Certificate\
**Created:** [27 November 2024 08:16 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475 "2024-11-27T08:16:55Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![SimoneBuralli](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SimoneBuralli](https://syncloud.discourse.group/u/SimoneBuralli)\
**Post date:** [27 November 2024 08:16 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/1 "2024-11-27T08:16:55Z")

</div>

hi team,  
the certificate on my machine has expired. How can I solve it? Here follows the certificate log:

Nov 27 08:13:00 syncloud platform.backend[1714]: {“category”: “certificate”}

Nov 27 08:00:54 syncloud platform.backend[1714]: info cert/generator.go:108 certificate info {“category”: “certificate”, “subject”: “\*\*\*.syncloud.it”, “valid days”: 59, “real”: false}

Thank you  
Simone

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [1 December 2024 17:14 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/2 "2024-12-01T17:14:50Z")

</div>

Can you send me logs from settings - support (include support) please?

---

<div class="post-metadata">

**Author:** ![SimoneBuralli](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SimoneBuralli](https://syncloud.discourse.group/u/SimoneBuralli)\
**Post date:** [2 December 2024 08:33 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/3 "2024-12-02T08:33:22Z")

</div>

hi Boris,  
thanks for your reply. I’ve just sent the log to the support. Thanks

Simone

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [2 December 2024 22:04 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/4 "2024-12-02T22:04:33Z")

</div>

1. I cannot reply to your email as your address seems to be invalid the one registered on syncloud.it (s\*\*\*i@e\*\*\*it)
2. can you run these commands using SSH (it may take 10 mins) and send the output to support?

```auto
rm /var/snap/platform/current/syncloud.crt
rm /var/snap/platform/current/syncloud.key
snap run platform.cli cert

```

---

<div class="post-metadata">

**Author:** ![SimoneBuralli](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SimoneBuralli](https://syncloud.discourse.group/u/SimoneBuralli)\
**Post date:** [3 December 2024 09:15 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/5 "2024-12-03T09:15:06Z")

</div>

> [@boris](#):
>
> I cannot reply to your email as your address seems to be invalid the one registered on syncloud.it (s_ **i@e** _it)

Yes, that email address does not exist anymore and I’d like to change it but in the site syncloud.it it seems like it is not doable. Can you support me in doing it? Thanks

> can you run these commands using SSH (it may take 10 mins) and send the output to support?

```auto
root@syncloud:~# rm /var/snap/platform/current/syncloud.crt
root@syncloud:~# rm /var/snap/platform/current/syncloud.key
root@syncloud:~# snap run platform.cli cert
info cert/generator.go:154 unable to read certificate file: open /var/snap/platform/current/syncloud.crt: no such file or directory {"category": "certificate"}
info cert/generator.go:108 certificate info {"category": "certificate", "subject": "", "valid days": 0, "real": false}
2024/12/03 08:56:51 [INFO] acme: Registering account for s ***i@e*** t
2024/12/03 08:56:52 [INFO] [***.syncloud.it, *.***.syncloud.it] acme: Obtaining bundled SAN certificate
2024/12/03 08:56:52 [INFO] [*.***.syncloud.it] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/2091438427/439212437397
2024/12/03 08:56:52 [INFO] [***.syncloud.it] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/2091438427/439212437407
2024/12/03 08:56:52 [INFO] [*.***.syncloud.it] acme: use dns-01 solver
2024/12/03 08:56:52 [INFO] [***.syncloud.it] acme: Could not find solver for: tls-alpn-01
2024/12/03 08:56:52 [INFO] [***.syncloud.it] acme: Could not find solver for: http-01
2024/12/03 08:56:52 [INFO] [***.syncloud.it] acme: use dns-01 solver
2024/12/03 08:56:52 [INFO] [*.***.syncloud.it] acme: Preparing to solve DNS-01
info redirect/redirect.go:61 dns present: https://api.syncloud.it/certbot/present
2024/12/03 08:56:52 [DEBUG] POST https://api.syncloud.it/certbot/present
2024/12/03 08:56:53 [INFO] [***.syncloud.it] acme: Preparing to solveDNS-01
info redirect/redirect.go:61 dns present: https://api.syncloud.it/certbot/present
2024/12/03 08:56:53 [DEBUG] POST https://api.syncloud.it/certbot/present
2024/12/03 08:56:54 [INFO] [*.***.syncloud.it] acme: Trying to solve DNS-01
2024/12/03 08:56:54 [INFO] [*.***.syncloud.it] acme: Checking DNS record propagation using [192.168.1.1:53]
2024/12/03 08:57:54 [INFO] Wait for propagation [timeout: 5m0s, interval: 1m0s]
2024/12/03 08:57:54 [INFO] [*.***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 08:58:54 [INFO] [*.***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 08:59:54 [INFO] [*.***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 09:00:54 [INFO] [*.***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 09:01:54 [INFO] [*.***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 09:02:54 [INFO] [***.syncloud.it] acme: Trying to solve DNS-01
2024/12/03 09:02:54 [INFO] [***.syncloud.it] acme: Checking DNS record propagation using [192.168.1.1:53]
2024/12/03 09:03:54 [INFO] Wait for propagation [timeout: 5m0s, interval: 1m0s]
2024/12/03 09:03:54 [INFO] [***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 09:04:54 [INFO] [***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 09:05:54 [INFO] [***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 09:06:54 [INFO] [***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 09:07:54 [INFO] [***.syncloud.it] acme: Waiting for DNS record propagation.
2024/12/03 09:08:54 [INFO] [*.***.syncloud.it] acme: Cleaning DNS-01 challenge
info redirect/redirect.go:69 dns cleanup: https://api.syncloud.it/certbot/cleanup
2024/12/03 09:08:54 [DEBUG] POST https://api.syncloud.it/certbot/cleanup
2024/12/03 09:08:55 [INFO] [***.syncloud.it] acme: Cleaning DNS-01 challenge
info redirect/redirect.go:69 dns cleanup: https://api.syncloud.it/certbot/cleanup
2024/12/03 09:08:55 [DEBUG] POST https://api.syncloud.it/certbot/cleanup
2024/12/03 09:08:56 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz/2091438427/439212437397
2024/12/03 09:08:56 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz/2091438427/439212437407
info cert/generator.go:88 unable to generate certificate: error: one or more domains had a problem:
[*.***.syncloud.it] time limit exceeded: last error: NS ns-439.awsdns-54.com. returned SERVFAIL for _acme-challenge.***.syncloud.it.
[***.syncloud.it] time limit exceeded: last error: NS ns-439.awsdns-54.com. returned SERVFAIL for _acme-challenge.***.syncloud.it.
 {"category": "certificate"}
root@syncloud:~#

```

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [3 December 2024 09:17 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/6 "2024-12-03T09:17:34Z")

</div>

> Yes, that email address does not exist anymore and I’d like to change it but in the site syncloud.it it seems like it is not doable. Can you support me in doing it?

Yes, send your new email to support olease.

---

<div class="post-metadata">

**Author:** ![SimoneBuralli](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SimoneBuralli](https://syncloud.discourse.group/u/SimoneBuralli)\
**Post date:** [3 December 2024 09:22 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/7 "2024-12-03T09:22:42Z")

</div>

Could you give me the mail address of the support? Thanks

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [3 December 2024 09:23 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/8 "2024-12-03T09:23:16Z")

</div>

> time limit exceeded (192.168.1.1:53)

Do you have any non-standard DNS servers behind your router, like pihole or something?

Looks like your device cannot see DNS changes that we make before asking LetsEncrypt to issue a new certificate.  
Can you try setting it to something like 8.8.8.8 (google dns) for now to see if it helps?

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [3 December 2024 09:24 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/9 "2024-12-03T09:24:40Z")

</div>

> mail address of the support?

support@syncloud.it

---

<div class="post-metadata">

**Author:** ![SimoneBuralli](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SimoneBuralli](https://syncloud.discourse.group/u/SimoneBuralli)\
**Post date:** [3 December 2024 09:47 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/10 "2024-12-03T09:47:16Z")

</div>

> [@boris](#):
>
> Do you have any non-standard DNS servers behind your router, like pihole or something?

no, the only change is that I have a new phone carrier Vodafone) and its own router but I have opened port 443, externl access was going fine till few days ago.

> Can you try setting it to something like 8.8.8.8 (google dns) for now to see if it helps

I’m sorry, the carrier has blocked the manual DNS management in the router.  
The only things I can do are: switch the router Firewall off; assign a static NAT to a device; use a DDNS provider.

p.s. there is another use case in this community with a Vodafone router

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [3 December 2024 21:24 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/11 "2024-12-03T21:24:15Z")

</div>

ok, I am testing a switch to google dns (8.8.8.8) for dns propagation check instead of what devices get from home network (sometimes not reliable for quick dns propagation checks).

I will let you know asap

---

<div class="post-metadata">

**Author:** ![SimoneBuralli](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SimoneBuralli](https://syncloud.discourse.group/u/SimoneBuralli)\
**Post date:** [3 December 2024 21:48 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/12 "2024-12-03T21:48:18Z")

</div>

thanks a lot. Despite Vodafone’s router being a mess of locked options (I wasn’t completely aware of, untill today), before the problem with the certificate it worked fine. At the same time there could be - potentially - many other Syncloud users affected by the same problem. Looking forward a possible solution from your side, Boris 🕶

Simone

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [4 December 2024 08:51 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/13 "2024-12-04T08:51:07Z")

</div>

> potentially - many other Syncloud users affected

Exactly

I have just pushed the update, can you update from Settings - Updates and after that if it does not get the cert automatically (after an hour or so) could you send the logs from Settings - Support please.

Do not run cert command manually as it may interfere with the auto cert update.

---

<div class="post-metadata">

**Author:** ![SimoneBuralli](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SimoneBuralli](https://syncloud.discourse.group/u/SimoneBuralli)\
**Post date:** [4 December 2024 09:08 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/14 "2024-12-04T09:08:39Z")

</div>

update to 2185 is ongoing. I’ll update you as soon as I have some news

---

<div class="post-metadata">

**Author:** ![SimoneBuralli](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SimoneBuralli](https://syncloud.discourse.group/u/SimoneBuralli)\
**Post date:** [4 December 2024 11:18 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/15 "2024-12-04T11:18:15Z")

</div>

hi Boris,  
I tried 2 hrs after the update and apparently the problem is still there. I have sent you the logs.  
Thanks

SB

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [4 December 2024 13:58 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/16 "2024-12-04T13:58:03Z")

</div>

Does Settings - Update say system is on 2185?

---

<div class="post-metadata">

**Author:** ![SimoneBuralli](https://avatars.discourse-cdn.com/v4/letter/s/f07891/32.png) [@SimoneBuralli](https://syncloud.discourse.group/u/SimoneBuralli)\
**Post date:** [4 December 2024 14:24 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/17 "2024-12-04T14:24:39Z")

</div>

yes: system 2185, installer 595

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [4 December 2024 20:50 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/18 "2024-12-04T20:50:53Z")

</div>

still not good, not sure if it is rate limit now by letsencrypt (which should not be), sent you the command to update your email locally, they may send the reason to the email.

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [5 December 2024 08:43 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/19 "2024-12-05T08:43:40Z")

</div>

ok, can you run this on the device:

```auto
apt install -y dnsutils
dig _acme-challenge.simoneburalli.syncloud.it TXT
dig _acme-challenge.simoneburalli.syncloud.it TXT @ns-1063.awsdns-04.org

```

---

<div class="post-metadata">

**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\
**Post date:** [5 December 2024 08:52 UTC](https://syncloud.discourse.group/t/certificate-is-expired/475/20 "2024-12-05T08:52:00Z")

</div>

and this

```auto
dig _acme-challenge.simoneburalli.syncloud.it TXT @8.8.8.8

```

[Next page](https://syncloud.discourse.group/t/certificate-is-expired/475.md?page=2)
