What's new

Let's Encrypt certificate stuck on "updating ..."

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

echable

Occasional Visitor
Seen other threads on this but no explanation that's worked for me.

Is this just a bug in the firmware or something ?

Do I need to enable external router admin IP address access for it to work ?

Do I need to login to the router interface using "https://ddns.tumbao.asuscomm.com" for the certificate to work ? For some reason I can't, it doesn't respond.

Currently, I have a certificate issued to "192.168.1.1" that is permanently stuck on "updating..." in spite of rebooting etc., and get the security warnig in browsers.

Using latest Merlin firmware on Asus RT AC 87 U.

Thank you for your help!
 
Seen other threads on this but no explanation that's worked for me.

Is this just a bug in the firmware or something ?

Do I need to enable external router admin IP address access for it to work ?

Do I need to login to the router interface using "https://ddns.tumbao.asuscomm.com" for the certificate to work ? For some reason I can't, it doesn't respond.

Currently, I have a certificate issued to "192.168.1.1" that is permanently stuck on "updating..." in spite of rebooting etc., and get the security warnig in browsers.

Using latest Merlin firmware on Asus RT AC 87 U.

Thank you for your help!

As per the other threads, Asus is aware of the issue and as of yesterday starting to release firmware updates where the changes will eventually make their way to Merlin’s firmware.
 
Thanks for your reply! :) Great news , I must have missed that crucial bit of info in the other threads - then I just have to wait for Merlin's release with (I assume) the same bugfix! Any typical delay between Asus official release and the Merlin improved update ?
 
Thanks for your reply! :) Great news , I must have missed that crucial bit of info in the other threads - then I just have to wait for Merlin's release with (I assume) the same bugfix! Any typical delay between Asus official release and the Merlin improved update ?

Depends on a combination of when Asus release the GPL (source code), plus whenever Merlin has free time to merge the changes as this is a hobby on top of his full time job.


So it will be ready when it’s ready ;)
 
I have the latest Merlin Firmware version 384.13_4 on an RT-AC87U which should fix certificate error yet I'm still getting Updating error. Any assistance would be greatly appreciated.
 
I have the latest Merlin Firmware version 384.13_4 on an RT-AC87U which should fix certificate error yet I'm still getting Updating error. Any assistance would be greatly appreciated.

Go to Administration, System, and set "Authentication Method" to both or https, it worked for me.
 
Check your System Log, it will report what the ACME client is doing.
 
Check your System Log, it will report what the ACME client is doing.

Mar 6 12:30:19 kernel: [Fri Mar 6 12:30:19 EST 2020] _authorizations_map='xxxxxx.asuscomm.com,{"identifier":{"type":"dns","value":"xxxxxx.asuscomm.com"},"status":"pending","expires":"2020-03-09T20:49:54Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/3117151662/YVGQxw","token":"PJpnFY35ZQcCZ9aob0taEmK4opd5bSmunE5TlIUsTS0"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/3117151662/_A5
 
Mar 6 12:30:19 kernel: [Fri Mar 6 12:30:19 EST 2020] _authorizations_map='xxxxxx.asuscomm.com,{"identifier":{"type":"dns","value":"xxxxxx.asuscomm.com"},"status":"pending","expires":"2020-03-09T20:49:54Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/3117151662/YVGQxw","token":"PJpnFY35ZQcCZ9aob0taEmK4opd5bSmunE5TlIUsTS0"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/3117151662/_A5

Seems to be stuck on completing DNS-based validation. No idea why.
 
Seems to be stuck on completing DNS-based validation. No idea why.

I finally realized what the issue was, I think..LOL The router is actually at my daughters house and it was reset after I had set it up. When she reentered the DDNS she used a couple capital letters in the name. Reset it with all lower case letters and now it works..lol Funny because it partially worked only the certificate wouldn't load. Thanks for your assistance!!!
 
Last edited:
Could someone please help me identify the issue for a similar problem please?
Here is the log with ACME references in it.

Thanks a lot!

k.
 

Attachments

  • ACME_ERROR.txt
    12.1 KB · Views: 225

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top