Let's Encrypt certificate stuck on "updating ..."

[echable]

Seen other threads on this but no explanation that's worked for me.

Is this just a bug in the firmware or something ?

Do I need to enable external router admin IP address access for it to work ?

Do I need to login to the router interface using "https://ddns.tumbao.asuscomm.com" for the certificate to work ? For some reason I can't, it doesn't respond.

Currently, I have a certificate issued to "192.168.1.1" that is permanently stuck on "updating..." in spite of rebooting etc., and get the security warnig in browsers.

Using latest Merlin firmware on Asus RT AC 87 U.

Thank you for your help!

 

[Adamm]

Seen other threads on this but no explanation that's worked for me.

Is this just a bug in the firmware or something ?

Do I need to enable external router admin IP address access for it to work ?

Do I need to login to the router interface using "https://ddns.tumbao.asuscomm.com" for the certificate to work ? For some reason I can't, it doesn't respond.

Currently, I have a certificate issued to "192.168.1.1" that is permanently stuck on "updating..." in spite of rebooting etc., and get the security warnig in browsers.

Using latest Merlin firmware on Asus RT AC 87 U.

Thank you for your help!

As per the other threads, Asus is aware of the issue and as of yesterday starting to release firmware updates where the changes will eventually make their way to Merlin’s firmware.

 

[echable]

Thanks for your reply! Great news , I must have missed that crucial bit of info in the other threads - then I just have to wait for Merlin's release with (I assume) the same bugfix! Any typical delay between Asus official release and the Merlin improved update ?

 

[Adamm]

Thanks for your reply! Great news , I must have missed that crucial bit of info in the other threads - then I just have to wait for Merlin's release with (I assume) the same bugfix! Any typical delay between Asus official release and the Merlin improved update ?

Depends on a combination of when Asus release the GPL (source code), plus whenever Merlin has free time to merge the changes as this is a hobby on top of his full time job.


So it will be ready when it’s ready

 

[Grisu]

for RT-AC68U they released new 384.81351 with fix, others to be expected next days or weeks, but still no GPL at the moment (Merlin often gets it little earlier): https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AC68U/FW_RT_AC68U_300438481351.zip

 

[Jimn2tdi]

I have the latest Merlin Firmware version 384.13_4 on an RT-AC87U which should fix certificate error yet I'm still getting Updating error. Any assistance would be greatly appreciated.

 

[kidd232]

I have the latest Merlin Firmware version 384.13_4 on an RT-AC87U which should fix certificate error yet I'm still getting Updating error. Any assistance would be greatly appreciated.

Go to Administration, System, and set "Authentication Method" to both or https, it worked for me.

 

[Jimn2tdi]

Go to Administration, System, and set "Authentication Method" to both or https, it worked for me.

It was already set to BOTH so I changed it to HTTPS, no change. Still UPDATING...

 

[RMerlin]

Check your System Log, it will report what the ACME client is doing.

 

[Jimn2tdi]

Check your System Log, it will report what the ACME client is doing.

Mar 6 12:30:19 kernel: [Fri Mar 6 12:30:19 EST 2020] _authorizations_map='xxxxxx.asuscomm.com,{"identifier":{"type":"dns","value":"xxxxxx.asuscomm.com"},"status":"pending","expires":"2020-03-09T20:49:54Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/3117151662/YVGQxw","token":"PJpnFY35ZQcCZ9aob0taEmK4opd5bSmunE5TlIUsTS0"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/3117151662/_A5

 

[RMerlin]

Mar 6 12:30:19 kernel: [Fri Mar 6 12:30:19 EST 2020] _authorizations_map='xxxxxx.asuscomm.com,{"identifier":{"type":"dns","value":"xxxxxx.asuscomm.com"},"status":"pending","expires":"2020-03-09T20:49:54Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/3117151662/YVGQxw","token":"PJpnFY35ZQcCZ9aob0taEmK4opd5bSmunE5TlIUsTS0"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/3117151662/_A5

Seems to be stuck on completing DNS-based validation. No idea why.

 

[Jimn2tdi]

Seems to be stuck on completing DNS-based validation. No idea why.

I finally realized what the issue was, I think..LOL The router is actually at my daughters house and it was reset after I had set it up. When she reentered the DDNS she used a couple capital letters in the name. Reset it with all lower case letters and now it works..lol Funny because it partially worked only the certificate wouldn't load. Thanks for your assistance!!!

 

[jksmurf]

Could someone please help me identify the issue for a similar problem please?
Here is the log with ACME references in it.

Thanks a lot!

k.