Our control panel uses HTTP authorisation to get your certificate issued by LetsEncrypts remote servers.
When you install or renew LetsEncrypt it has to authorise the owner of the domain name and it does this by creating a folder called '.well-known' at the root of your website.
By default Umbraco redirects any unknown file requests and LetsEncrypt is unable to get to the folder and the validation process fails.
You can change the following rule in your web.config in the root of your Umbraco site to resolve this issue:
Change from:
<add key="umbracoReservedPaths" value="~/umbraco,~/install/" />To:
<add key="umbracoReservedPaths" value="~/umbraco,~/install/,~/.well-known" />LetsEncrypt should now install and renew correctly in our CP.
Limited Support:
Please note that these free certificates are provided as is.
We provide the technology to install them in our control panel which uses LetsEncrpt's API to get the certifcates issued and then our CP installs them on your websites.
If Internet Security Research Group (ISRG) ever stop providing and renewing these certificates free of charge then clients certificates installed on our systems will not be renewed and will expire.
We make no guarantee that LetsEncrypt certificates will always work or renew as they rely on ISRG and their services functioning which we have no control over.
Therefore if clients prefer a fully managed and guaranteed SSL certificate solution we recommend purchasing a commercial certificate from Winserve. These certificates are issued, installed, renewed and fully supported manually by our own technical team. You can view our wide selection of certificates by clicking here.
