# Not able to access site after letsencrypt cert expiry and rebuild due to IPV6
**URL:** https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851
**Category:** Support
**Created:** [8 ביולי, 2017, 8:10am UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851 "2017-07-08T08:10:57Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@Umashankar\_Ankuri](https://meta.discourse.org/u/Umashankar_Ankuri)
#### Post date: [8 ביולי, 2017, 8:10am UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/1 "2017-07-08T08:10:57Z")
Hi,
Please help with below issue.
Letsencrypt cert expired, thought that rebuilding the app would renew the cert ,rebuild done.
Now I get this error nginx: `[emerg] PEM_read_bio_X509_AUX("/shared/ssl/javaqna.com.cer") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: TRUSTED CERTIFICATE)`
---
### Author:  [@terraboss](https://meta.discourse.org/u/terraboss)
#### Post date: [8 ביולי, 2017, 3:20pm UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/2 "2017-07-08T15:20:28Z")
Have you tried to remove the old one (ssl folder) and than rebuild it?
---
### Author:  [@Umashankar\_Ankuri](https://meta.discourse.org/u/Umashankar_Ankuri)
#### Post date: [8 ביולי, 2017, 4:48pm UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/3 "2017-07-08T16:48:01Z")
Hi Markus,
Thanks for the reply.
i have executed below from the thread
```
rm -rf /var/discourse/shared/standalone/ssl
rm -rf /var/discourse/shared/standalone/letsencrypt
./launcher rebuild app
```
> [@Set up HTTPS support with Let's Encrypt](https://meta.discourse.org/t/setting-up-lets-encrypt/40709):
>
> bookmark This is a guide for enabling HTTPS on an existing Discourse installation using Let’s Encrypt. It assumes prior installation without HTTPS enabled. person_raising_hand Required user level: System Administrator exclamation This guide is only for existing installs where HTTPS is not enabled. Following the [official setup guide](https://github.com/discourse/discourse/blob/main/docs/INSTALL-cloud.md) automatically enables HTTPS by default. So you’d like to add https to your Discourse absolutely free, courtesy of our friends at [Let’s Encrypt?](https://letsencrypt.org/)bell I…
not sure what i’m missing ☹
---
### Author:  [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [9 ביולי, 2017, 2:50am UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/4 "2017-07-09T02:50:15Z")
What do the rebuild logs say?
---
### Author:  [@Umashankar\_Ankuri](https://meta.discourse.org/u/Umashankar_Ankuri)
#### Post date: [10 ביולי, 2017, 5:03pm UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/5 "2017-07-10T17:03:01Z")
I get the message
`[emerg] PEM_read_bio_X509_AUX("/shared/ssl/javaqna.com.cer") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: TRUSTED CERTIFICATE)`
also mentioned in the first thread itself.
Thank you.
---
### Author:  [@Umashankar\_Ankuri](https://meta.discourse.org/u/Umashankar_Ankuri)
#### Post date: [13 ביולי, 2017, 2:37am UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/6 "2017-07-13T02:37:05Z")
Hi,
Any one help with this issue. not able to understand what is the error with letsencrypt. tried rebuilding by removing ssl folder cert files serveral times as mentioned above, but no luck.
Thanks.
---
### Author:  [@tgxworld](https://meta.discourse.org/u/tgxworld)
#### Post date: [13 ביולי, 2017, 7:08am UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/8 "2017-07-13T07:08:32Z")
I worked with @Umashankar_Ankuri and this looks like a case where the domain’s IPv6 address was configured incorrectly causing the validation check to fail.
[https://github.com/Neilpang/acme.sh/issues/867](https://github.com/Neilpang/acme.sh/issues/867)
@Umashankar_Ankuri can confirm the problem once he fixes his DNS settings.
---
### Author:  [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [13 ביולי, 2017, 10:09pm UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/9 "2017-07-13T22:09:26Z")
Aaah, yes, that been causing some heartburn [over on the LE forums](https://community.letsencrypt.org).
---
### Author:  [@Umashankar\_Ankuri](https://meta.discourse.org/u/Umashankar_Ankuri)
#### Post date: [15 ביולי, 2017, 3:46am UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/10 "2017-07-15T03:46:25Z")
HI Guo Xiang Tan,
I have fixed problem with IPV6, just removed those records from DNS. and discourse is now up!! we can mark this as fixed.
Just wondering how it worked for the first time!!
Thank you.
---
### Author:  [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [15 ביולי, 2017, 5:46am UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/11 "2017-07-15T05:46:51Z")
> [@Umashankar\_Ankuri](#):
>
> Just wondering how it worked for the first time!!
As per the LE forum topic I linked to earlier, LE recently changed their behaviour from preferring IPv4 to preferring IPv6 records first.
---
### Author:  [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [8 ביוני, 2024, 12:44pm UTC](https://meta.discourse.org/t/not-able-to-access-site-after-letsencrypt-cert-expiry-and-rebuild-due-to-ipv6/65851/12 "2024-06-08T12:44:27Z")
This topic was automatically closed after 2527 days. New replies are no longer allowed.