Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Discuss
  3. Certificate renewals and app updates fail -- D.O. API expired

Certificate renewals and app updates fail -- D.O. API expired

Scheduled Pinned Locked Moved Discuss
certificatesdigitalocean
5 Posts 2 Posters 852 Views 2 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J Offline
      J Offline
      jegillikin
      wrote on last edited by girish
      #1

      This isn't so much a problem I need help with, but rather sharing something I didn't immediately find in a site search. I fixed my own problem, so now it's a suggestion. 🙂

      I experienced a certificate error for the domain upon which my Cloudron control panel happily resides. No amount of irritable gesticulating could make it work -- I'd try to force certificate renewals only to see the control panel go offline and prove unable to connect. Logs weren't especially useful, either. I had to reboot the server from the shell to make things work again.

      When I tried updating one specific app and it gave me a 500 error on the Digital Ocean side, it occurred to me that the API credentials must have expired. Which, as it happens, proved to be the case. I generated a new set, added it, and viola! life is good.

      I wonder if we can have a better way of uncovering expired DNS API connections? Perhaps a check before a certificate upgrade that flags a plain-English error?

      girishG 1 Reply Last reply
      0
      • girishG Offline
        girishG Offline
        girish
        Staff
        wrote on last edited by
        #2

        @jegillikin Thanks for the report. Cloudron already has code to handle expired tokens but clearly it's not working. I have to check and get back as to why it's not working.

        1 Reply Last reply
        1
        • girishG Offline
          girishG Offline
          girish
          Staff
          wrote on last edited by
          #3

          Started testing this a bit. In the location UI, the error is handled:

          52873b3d-c7b8-46e7-94ce-68cd0a395fc1-image.png

          In the install UI also the error is handled:
          3a1d239d-93b9-4a55-b8b5-973c547a08c0-image.png

          Existing app operation fails:
          1aea73d6-acd4-4713-878b-72a7e3cd6366-image.png

          The cert renewal code also does not crash. I wonder if the error was something else.

          1 Reply Last reply
          0
          • J jegillikin

            This isn't so much a problem I need help with, but rather sharing something I didn't immediately find in a site search. I fixed my own problem, so now it's a suggestion. 🙂

            I experienced a certificate error for the domain upon which my Cloudron control panel happily resides. No amount of irritable gesticulating could make it work -- I'd try to force certificate renewals only to see the control panel go offline and prove unable to connect. Logs weren't especially useful, either. I had to reboot the server from the shell to make things work again.

            When I tried updating one specific app and it gave me a 500 error on the Digital Ocean side, it occurred to me that the API credentials must have expired. Which, as it happens, proved to be the case. I generated a new set, added it, and viola! life is good.

            I wonder if we can have a better way of uncovering expired DNS API connections? Perhaps a check before a certificate upgrade that flags a plain-English error?

            girishG Offline
            girishG Offline
            girish
            Staff
            wrote on last edited by
            #4

            @jegillikin said in Certificate renewals and app updates fail -- D.O. API expired:

            When I tried updating one specific app and it gave me a 500 error on the Digital Ocean side,

            Ah! The DO API returned 500.. I wonder if they had some issue with some bad token and this ended causing Cloudron code problems.

            In any case, if you hit this again, let me know.

            J 1 Reply Last reply
            0
            • girishG girish

              @jegillikin said in Certificate renewals and app updates fail -- D.O. API expired:

              When I tried updating one specific app and it gave me a 500 error on the Digital Ocean side,

              Ah! The DO API returned 500.. I wonder if they had some issue with some bad token and this ended causing Cloudron code problems.

              In any case, if you hit this again, let me know.

              J Offline
              J Offline
              jegillikin
              wrote on last edited by
              #5

              @girish Will do. It's actually not the first time I've run into the problem and a re-fresh of the API credentials solved the problem, although this is the first time I specifically observed that it was a 500 error vs. a 401.

              1 Reply Last reply
              0
              Reply
              • Reply as topic
              Log in to reply
              • Oldest to Newest
              • Newest to Oldest
              • Most Votes


                • Login

                • Don't have an account? Register

                • Login or register to search.
                • First post
                  Last post
                0
                • Categories
                • Recent
                • Tags
                • Popular
                • Bookmarks
                • Search