TLS Certificate Exception

Hello Team,

I have been trying to setup a frappe/press environment.
So far everything was smooth, I was able to installed and initiate the configuration… but know I’m in the creation of the proxy server

Route53 and Certbot are working fine, but when I try to create a new proxy server on press I got this error “Valid wildcard TLS Certificate not found for kidemonas.services”

Additionally I got the a TLS Certificate Exception, below.

thanks for your help

``Data:
{
“certificate”: “new-tls-certificate-1”
}
Exception:
Traceback with variables (most recent call last):
File “apps/press/press/press/doctype/tls_certificate/tls_certificate.py”, line 55, in _obtain_certificate
) = ca.obtain(
self = <TLSCertificate: new-tls-certificate-1>
settings = <PressSettings: Press Settings>
ca = <press.press.doctype.tls_certificate.tls_certificate.LetsEncrypt object at 0x7f06c81add50>
File “apps/press/press/press/doctype/tls_certificate/tls_certificate.py”, line 175, in obtain
self.obtain()
self = <press.press.doctype.tls_certificate.tls_certificate.LetsEncrypt object at 0x7f06c81add50>
domain = ‘kidemonas.services’
rsa_key_size = ‘2048’
wildcard = 1
File “apps/press/press/press/doctype/tls_certificate/tls_certificate.py”, line 210, in obtain
self.obtain_wildcard()
self = <press.press.doctype.tls_certificate.tls_certificate.LetsEncrypt object at 0x7f06c81add50>
File “apps/press/press/press/doctype/tls_certificate/tls_certificate.py”, line 226, in obtain_wildcard
self.run(self.certbot_command(), environment=environment)
self = <press.press.doctype.tls_certificate.tls_certificate.LetsEncrypt object at 0x7f06c81add50>
domain = <RootDomain: kidemonas.services>
environment = environ({‘LESSOPEN’: ‘| /usr/bin/lesspipe %s’, ‘MAIL’: ‘/var/mail/frappe’, ‘USER’: ‘frappe’, ‘SSH_CLIENT’: ‘162.243.190.66 43121 22’, ‘XDG_SESSION_TYPE’: ‘tty’, ‘SHLVL’: ‘2’, ‘DEV_SERVER’: ‘true’, ‘MOTD_SHOWN’: ‘pam’, ‘HOME’: ‘/home/frappe’, ‘OLDPWD’: ‘/home/frappe’, ‘PORT’: ‘5300’, ‘NVM_BIN’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin’, ‘SSH_TTY’: ‘/dev/pts/0’, ‘NVM_INC’: ‘/home/frappe/.nvm/versions/node/v14.15.0/include/node’, ‘PYTHONUNBUFFERED’: ‘true’, ‘HONCHO_PROCESS_NAME’: ‘web.1’, ‘DBUS_SESSION_BUS_ADDRESS’: ‘unix:path=/run/user/0/bus’, ‘NVM_DIR’: ‘/home/frappe/.nvm’, ‘LOGNAME’: ‘frappe’, '
': ‘/usr/local/bin/bench’, ‘XDG_SESSION_CLASS’: ‘user’, ‘TERM’: ‘xterm’, ‘XDG_SESSION_ID’: ‘1’, ‘PATH’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin’, ‘XDG_RUNTIME_DIR’: ‘/run/user/0’, ‘LANG’: ‘C.UTF-8’, ‘LS_COLORS’: 'rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;…
File “apps/press/press/press/doctype/tls_certificate/tls_certificate.py”, line 272, in run
raise e
self = <press.press.doctype.tls_certificate.tls_certificate.LetsEncrypt object at 0x7f06c81add50>
command = ‘certbot certonly --dns-route53 --logs-dir /home/frappe/.certbot/logs --work-dir /home/frappe/.certbot --config-dir /home/frappe/.certbot --force-renewal --agree-tos --eff-email --email me@edman.dev --staple-ocsp --rsa-key-size 2048 --cert-name *.kidemonas.services --domains *.kidemonas.services’
environment = environ({‘LESSOPEN’: ‘| /usr/bin/lesspipe %s’, ‘MAIL’: ‘/var/mail/frappe’, ‘USER’: ‘frappe’, ‘SSH_CLIENT’: ‘162.243.190.66 43121 22’, ‘XDG_SESSION_TYPE’: ‘tty’, ‘SHLVL’: ‘2’, ‘DEV_SERVER’: ‘true’, ‘MOTD_SHOWN’: ‘pam’, ‘HOME’: ‘/home/frappe’, ‘OLDPWD’: ‘/home/frappe’, ‘PORT’: ‘5300’, ‘NVM_BIN’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin’, ‘SSH_TTY’: ‘/dev/pts/0’, ‘NVM_INC’: ‘/home/frappe/.nvm/versions/node/v14.15.0/include/node’, ‘PYTHONUNBUFFERED’: ‘true’, ‘HONCHO_PROCESS_NAME’: ‘web.1’, ‘DBUS_SESSION_BUS_ADDRESS’: ‘unix:path=/run/user/0/bus’, ‘NVM_DIR’: ‘/home/frappe/.nvm’, ‘LOGNAME’: ‘frappe’, '
': ‘/usr/local/bin/bench’, ‘XDG_SESSION_CLASS’: ‘user’, ‘TERM’: ‘xterm’, ‘XDG_SESSION_ID’: ‘1’, ‘PATH’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin’, ‘XDG_RUNTIME_DIR’: ‘/run/user/0’, ‘LANG’: ‘C.UTF-8’, ‘LS_COLORS’: 'rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;…
File “apps/press/press/press/doctype/tls_certificate/tls_certificate.py”, line 267, in run
subprocess.check_output(
self = <press.press.doctype.tls_certificate.tls_certificate.LetsEncrypt object at 0x7f06c81add50>
command = ‘certbot certonly --dns-route53 --logs-dir /home/frappe/.certbot/logs --work-dir /home/frappe/.certbot --config-dir /home/frappe/.certbot --force-renewal --agree-tos --eff-email --email me@edman.dev --staple-ocsp --rsa-key-size 2048 --cert-name *.kidemonas.services --domains *.kidemonas.services’
environment = environ({‘LESSOPEN’: ‘| /usr/bin/lesspipe %s’, ‘MAIL’: ‘/var/mail/frappe’, ‘USER’: ‘frappe’, ‘SSH_CLIENT’: ‘162.243.190.66 43121 22’, ‘XDG_SESSION_TYPE’: ‘tty’, ‘SHLVL’: ‘2’, ‘DEV_SERVER’: ‘true’, ‘MOTD_SHOWN’: ‘pam’, ‘HOME’: ‘/home/frappe’, ‘OLDPWD’: ‘/home/frappe’, ‘PORT’: ‘5300’, ‘NVM_BIN’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin’, ‘SSH_TTY’: ‘/dev/pts/0’, ‘NVM_INC’: ‘/home/frappe/.nvm/versions/node/v14.15.0/include/node’, ‘PYTHONUNBUFFERED’: ‘true’, ‘HONCHO_PROCESS_NAME’: ‘web.1’, ‘DBUS_SESSION_BUS_ADDRESS’: ‘unix:path=/run/user/0/bus’, ‘NVM_DIR’: ‘/home/frappe/.nvm’, ‘LOGNAME’: ‘frappe’, '
': ‘/usr/local/bin/bench’, ‘XDG_SESSION_CLASS’: ‘user’, ‘TERM’: ‘xterm’, ‘XDG_SESSION_ID’: ‘1’, ‘PATH’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin’, ‘XDG_RUNTIME_DIR’: ‘/run/user/0’, ‘LANG’: ‘C.UTF-8’, ‘LS_COLORS’: ‘rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;…
File “/usr/lib/python3.10/subprocess.py”, line 420, in check_output
return run(popenargs, stdout=PIPE, timeout=timeout, check=True,
timeout = None
popenargs = ([‘certbot’, ‘certonly’, ‘–dns-route53’, ‘–logs-dir’, ‘/home/frappe/.certbot/logs’, ‘–work-dir’, ‘/home/frappe/.certbot’, ‘–config-dir’, ‘/home/frappe/.certbot’, ‘–force-renewal’, ‘–agree-tos’, ‘–eff-email’, ‘–email’, ‘me@edman.dev’, ‘–staple-ocsp’, ‘–rsa-key-size’, ‘2048’, ‘–cert-name’, '
.kidemonas.services’, ‘–domains’, ‘*.kidemonas.services’],)
kwargs = {‘stderr’: -2, ‘env’: environ({‘LESSOPEN’: ‘| /usr/bin/lesspipe %s’, ‘MAIL’: ‘/var/mail/frappe’, ‘USER’: ‘frappe’, ‘SSH_CLIENT’: ‘162.243.190.66 43121 22’, ‘XDG_SESSION_TYPE’: ‘tty’, ‘SHLVL’: ‘2’, ‘DEV_SERVER’: ‘true’, ‘MOTD_SHOWN’: ‘pam’, ‘HOME’: ‘/home/frappe’, ‘OLDPWD’: ‘/home/frappe’, ‘PORT’: ‘5300’, ‘NVM_BIN’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin’, ‘SSH_TTY’: ‘/dev/pts/0’, ‘NVM_INC’: ‘/home/frappe/.nvm/versions/node/v14.15.0/include/node’, ‘PYTHONUNBUFFERED’: ‘true’, ‘HONCHO_PROCESS_NAME’: ‘web.1’, ‘DBUS_SESSION_BUS_ADDRESS’: ‘unix:path=/run/user/0/bus’, ‘NVM_DIR’: ‘/home/frappe/.nvm’, ‘LOGNAME’: ‘frappe’, '
': ‘/usr/local/bin/bench’, ‘XDG_SESSION_CLASS’: ‘user’, ‘TERM’: ‘xterm’, ‘XDG_SESSION_ID’: ‘1’, ‘PATH’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin’, ‘XDG_RUNTIME_DIR’: ‘/run/user/0’, ‘LANG’: ‘C.UTF-8’, ‘LS_COLORS’: 'rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01…
File “/usr/lib/python3.10/subprocess.py”, line 524, in run
raise CalledProcessError(retcode, process.args,
input = None
capture_output = False
timeout = None
check = True
popenargs = ([‘certbot’, ‘certonly’, ‘–dns-route53’, ‘–logs-dir’, ‘/home/frappe/.certbot/logs’, ‘–work-dir’, ‘/home/frappe/.certbot’, ‘–config-dir’, ‘/home/frappe/.certbot’, ‘–force-renewal’, ‘–agree-tos’, ‘–eff-email’, ‘–email’, ‘me@edman.dev’, ‘–staple-ocsp’, ‘–rsa-key-size’, ‘2048’, ‘–cert-name’, ‘.kidemonas.services’, ‘–domains’, '.kidemonas.services’],)
kwargs = {‘stdout’: -1, ‘stderr’: -2, ‘env’: environ({‘LESSOPEN’: ‘| /usr/bin/lesspipe %s’, ‘MAIL’: ‘/var/mail/frappe’, ‘USER’: ‘frappe’, ‘SSH_CLIENT’: ‘162.243.190.66 43121 22’, ‘XDG_SESSION_TYPE’: ‘tty’, ‘SHLVL’: ‘2’, ‘DEV_SERVER’: ‘true’, ‘MOTD_SHOWN’: ‘pam’, ‘HOME’: ‘/home/frappe’, ‘OLDPWD’: ‘/home/frappe’, ‘PORT’: ‘5300’, ‘NVM_BIN’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin’, ‘SSH_TTY’: ‘/dev/pts/0’, ‘NVM_INC’: ‘/home/frappe/.nvm/versions/node/v14.15.0/include/node’, ‘PYTHONUNBUFFERED’: ‘true’, ‘HONCHO_PROCESS_NAME’: ‘web.1’, ‘DBUS_SESSION_BUS_ADDRESS’: ‘unix:path=/run/user/0/bus’, ‘NVM_DIR’: ‘/home/frappe/.nvm’, ‘LOGNAME’: ‘frappe’, '
': ‘/usr/local/bin/bench’, ‘XDG_SESSION_CLASS’: ‘user’, ‘TERM’: ‘xterm’, ‘XDG_SESSION_ID’: ‘1’, ‘PATH’: ‘/home/frappe/.nvm/versions/node/v14.15.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin’, ‘XDG_RUNTIME_DIR’: ‘/run/user/0’, ‘LANG’: ‘C.UTF-8’, ‘LS_COLORS’: 'rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:…
process = <Popen: returncode: 1 args: [‘certbot’, ‘certonly’, ‘–dns-route53’, '–logs…>
stdout = b"/usr/lib/python3/dist-packages/pkg_resources/init.py:116: PkgResourcesDeprecationWarning: 0.1.43ubuntu1 is an invalid version and will not be supported in a future release\n warnings.warn(\n/usr/lib/python3/dist-packages/pkg_resources/init.py:116: PkgResourcesDeprecationWarning: 1.1build1 is an invalid version and will not be supported in a future release\n warnings.warn(\nAn unexpected error occurred:\npkg_resources.VersionConflict: (certbot 1.21.0 (/usr/lib/python3/dist-packages), Requirement.parse(‘certbot>=2.1.0’))\nAsk for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/certbot-log-rndy4my1/log or re-run Certbot with -v for more details.\n"
stderr = None
retcode = 1
subprocess.CalledProcessError: Command ‘[‘certbot’, ‘certonly’, ‘–dns-route53’, ‘–logs-dir’, ‘/home/frappe/.certbot/logs’, ‘–work-dir’, ‘/home/frappe/.certbot’, ‘–config-dir’, ‘/home/frappe/.certbot’, ‘–force-renewal’, ‘–agree-tos’, ‘–eff-email’, ‘–email’, ‘me@edman.dev’, ‘–staple-ocsp’, ‘–rsa-key-size’, ‘2048’, ‘–cert-name’, ‘.kidemonas.services’, ‘–domains’, '.kidemonas.services’]’ returned non-zero exit status 1.`
type or paste code here

Hey @Edman_Perez if You Got Answer Then Please Share With Me As I’m Also Struck Here

hi ,

I am also facing the same issue, If anybody solved this, please let me know.

" Valid wildcard TLS Certificate not found for"

Check if you have pointed the root domain on Route53 to the right IP address. It should resolve to you IP of your Press server. From what I remember the wildcard TLS certificate was automatically created

It has resolved my issue.