403 error updating let's encrypt certificate

General Help
1

i noticed the following error on our pbx today

There was an error updating the certificate: 403 Forbidden Forbidden You don’t have permission to access /.freepbx-known/4039c81a67d2d7f0ff9f7f577c352c65 on this server. Apache/2.2.15 (CentOS) Server at xxxx.yyyy.net Port 80

the file is owned by asterisk, but unlike the other files in the directory it did not have the write permission for the group asterisk. changing the file permissions and restarting apache did not solve the problem. it gives me the same error message with a different file name. it seems the file is being created without the proper permisssions.

2

Does this fix it:

fwconsole chown
3

nope - tried that as well. the only thing i have not tried is rebooting the pbx

4

rebooting did not change anything either. suggestions?

5

Based on your sanitized post, you should be able to browse to the url, assuming it is not blocked by a firewall or apache credentials:

http://xxxx.yyyy.net:80/.freepbx-known/4039c81a67d2d7f0ff9f7f577c352c65
6

interesting in that if i use the url you reference it does not work but if i go to https:/xxxx.yyy.net it does work and does not complain about the certificate.

7

Needs to work without https. What’s the error you get

8

Forbidden
You don’t have permission to access /.freepbx-known/400183a8e646f8d9bd02da07ad9074b6 on this server.

Apache/2.2.15 (CentOS) Server at bkssfree.bkss.net Port 80

10

Solution:

11

sorry for the long delay in responding. your suggested fix (the updated sysadmin) did fix the problem. thanks again for the help