problem with letsencript

Javier Torres

unread,

Sep 30, 2021, 4:14:41 PM9/30/21

to bigbluebu...@googlegroups.com

not load

https://SITE/default.pdf

and I can't see presentations, and load presentation

Javier T.

heini66

unread,

Sep 30, 2021, 4:31:42 PM9/30/21

to bigbluebu...@googlegroups.com

please deliver more information. with this,nobody will be able to help. ( e.g: on what type of maschine you are running the bbb? what is is the output of bbb-conf --check, bbb-conf --version )

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-s...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/CAPm-x6Xh-2PLEQSGNA_hMiKehc9DmaOkONJ6ofcBnjC_KN-e%2Bg%40mail.gmail.com.

jav...@codigo-linux.com

unread,

Sep 30, 2021, 4:59:43 PM9/30/21

to BigBlueButton-Setup

bbb-conf --check

BigBlueButton Server 2.2.35 (2390)
                    Kernel version: 4.4.0-210-generic
                      Distribution: Ubuntu 16.04.7 LTS (64-bit)
                            Memory: 32828 MB
                         CPU cores: 8

/usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties (bbb-web)
       bigbluebutton.web.serverURL: https://virtual20.unida.edu.py
                defaultGuestPolicy: ALWAYS_ACCEPT
                 svgImagesRequired: true

/etc/nginx/sites-available/bigbluebutton (nginx)
                       server_name: virtual20.unida.edu.py
                              port: 80, [::]:80
                              port: 443 ssl

/opt/freeswitch/etc/freeswitch/vars.xml (FreeSWITCH)
                       local_ip_v4: 192.168.0.74
                   external_rtp_ip: 181.40.80.117
                   external_sip_ip: 181.40.80.117

/opt/freeswitch/etc/freeswitch/sip_profiles/external.xml (FreeSWITCH)
                        ext-rtp-ip: $${external_rtp_ip}
                        ext-sip-ip: $${external_sip_ip}
                        ws-binding: 181.40.80.117:5066
                       wss-binding: 181.40.80.117:7443

/usr/local/bigbluebutton/core/scripts/bigbluebutton.yml (record and playback)
                     playback_host: virtual20.unida.edu.py
                 playback_protocol: https
                            ffmpeg: 4.2.4-1ubuntu0.1bbb1~16.04.1

/etc/bigbluebutton/nginx/sip.nginx (sip.nginx)
                        proxy_pass: 181.40.80.117
                          protocol: http

/usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml (Kurento SFU)
                        kurento.ip: 181.40.80.117
                       kurento.url: ws://127.0.0.1:8888/kurento
                    kurento.sip_ip: 181.40.80.117
                    localIpAddress: 192.168.0.74
               recordScreenSharing: true
                     recordWebcams: true
                  codec_video_main: VP8
               codec_video_content: VP8

/usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml (HTML5 client)
                             build: 1144
                        kurentoUrl: wss://virtual20.unida.edu.py/bbb-webrtc-sfu
                  enableListenOnly: true
                    sipjsHackViaWs: true

/usr/share/bbb-web/WEB-INF/classes/spring/turn-stun-servers.xml (STUN Server)
                              stun:stun.l.google.com:19302

# Potential problems described below
....................# Error: Red5 log files not found

# Unavailable red5 logs (/usr/share/red5/log): screenshare-slf.log

bbb-conf --version

ii bbb-apps                              1:2.2.0-55                                      amd64        BigBlueButton applications for Red5
ii bbb-apps-akka                         2.2.0-103                                       all          BigBlueButton Apps (Akka)
ii bbb-apps-screenshare                  1:2.2.0-55                                      amd64        BigBlueButton screenshare module for Red5
ii bbb-apps-sip                          1:2.2.0-11                                      amd64        BigBlueButton SIP module for Red5
ii bbb-apps-video                        1:2.2.0-53                                      amd64        BigBlueButton video module for Red5
ii bbb-apps-video-broadcast              1:2.2.0-8                                       amd64        BigBlueButton video broadcast module for Red5
ii bbb-client                            1:2.2.0-40                                      amd64        BigBlueButton Flash client
ii bbb-config                            1:2.2.0-239                                     amd64        BigBlueButton configuration utilities
ii bbb-etherpad                          1:2.2.0-75                                      amd64        The EtherPad Lite components for BigBlueButton
ii bbb-freeswitch-core                   2:2.2.0-113                                     amd64        BigBlueButton build of FreeSWITCH
ii bbb-freeswitch-sounds                 1:1.6.7-6                                       amd64        FreeSWITCH Sounds
ii bbb-fsesl-akka                        2.2.0-78                                        all          BigBlueButton FS-ESL (Akka)
ii bbb-html5                             1:2.2.0-1144                                    amd64        The HTML5 components for BigBlueButton
ii bbb-mkclean                           1:0.8.7-3                                       amd64        Clean and optimize Matroska and WebM files
ii bbb-playback-presentation             1:2.2.0-35                                      amd64        BigBluebutton playback of presentation
ii bbb-record-core                       1:2.2.0-77                                      amd64        BigBlueButton record and playback
ii bbb-red5                              1:1.0.10-16                                     amd64        The Red5 server for BigBlueButton
ii bbb-transcode-akka                    2.2.0-8                                         all          BigBlueButton Transcoder
ii bbb-web                               1:2.2.0-155                                     amd64        BigBlueButton API
ii bbb-webrtc-sfu                        1:2.2.0-116                                     amd64        BigBlueButton WebRTC SFU
ii bigbluebutton                         1:2.2.0-5                                       amd64        Open source web conferencing platform (bbb)
ii ffmpeg                                7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        Tools for transcoding, streaming and playing of multimedia files
ii libavcodec58:amd64                    7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        FFmpeg library with de/encoders for audio/video codecs - runtime files
ii libavdevice58:amd64                   7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        FFmpeg library for handling input and output devices - runtime files
ii libavfilter7:amd64                    7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        FFmpeg library containing media filters - runtime files
ii libavformat58:amd64                   7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        FFmpeg library with (de)muxers for multimedia containers - runtime files
ii libavresample4:amd64                  7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        FFmpeg compatibility library for resampling - runtime files
ii libavutil56:amd64                     7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        FFmpeg library with functions for simplifying programming - runtime files
ii libopusenc0                           0.2.1-1bbb1                                     amd64        High-level API for encoding Ogg Opus audio streams
ii libpostproc55:amd64                   7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        FFmpeg library for post processing - runtime files
ii libswresample3:amd64                  7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        FFmpeg library for audio resampling, rematrixing etc. - runtime files
ii libswscale5:amd64                     7:4.2.4-1ubuntu0.1bbb1~16.04.1                  amd64        FFmpeg library for image scaling and various conversions - runtime files

Ghazi TRIKI

unread,

Sep 30, 2021, 5:11:52 PM9/30/21

to BigBlueButton-Setup

Hello,

It only affect servers with Ubuntu 16.04 user Let's encrypt certificates.

Calving suggested the following solution (does not work under certain kernel not having squashfs enabled):

sudo apt-get remove certbot
sudo apt-get install snapd
sudo snap install --classic certbot
sudo certbot renew --force-renewal --cert-name mybbb.server.com --preferred-chain "ISRG Root X1"

Another solution is to use paid SSL certificate, I tested it and it works.

Another solution suggested by Stephen Dame, point the DNS to a valid distribution, generate the certificate then copy it back to the first server.

Thanks,

Ghazi

Javier Torres

unread,

Sep 30, 2021, 5:33:26 PM9/30/21

to bigbluebu...@googlegroups.com

Greate, that work for me, thanks

Javier T

To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/4d7b0efa-7c82-4770-a00b-a916d976cbf8n%40googlegroups.com.

aleksej.ko...@gmail.com

unread,

Sep 30, 2021, 6:21:15 PM9/30/21

to BigBlueButton-Setup

Thanks. Your solution solves the problem!

пятница, 1 октября 2021 г. в 00:11:52 UTC+3, ghazi.n...@gmail.com:

Kamil Kobak

unread,

Oct 1, 2021, 7:11:19 AM10/1/21

to BigBlueButton-Setup

thx :)

Kostas Papadovasilakis

unread,

Oct 1, 2021, 9:36:48 AM10/1/21

to BigBlueButton-Setup

You are a god.... 18.04 with its embedded renewal for Let's Encrypt.

Your instruction worked. I was trying to solve it all day...

It renewed automatically, but the certificate was not trusted.

It needed the preferred chain option..

Hassan

unread,

Oct 5, 2021, 3:37:23 AM10/5/21

to BigBlueButton-Setup

Dear Ghazi,

---- Another solution is to use paid SSL certificate, I tested it and it works.

Do you have any step-by-step instructions for that?

For BBB 2.2.X and 2.3.X

Thanks in advance.

andnovatortwo

unread,

Oct 5, 2021, 5:49:08 AM10/5/21

to BigBlueButton-Setup

>> sudo certbot renew --force-renewal --cert-name mybbb.server.com --preferred-chain "ISRG Root X1"

It's "workaround" for self certificate. Works, yes. But I prefer fix root cause of expired DST Root CA X3, so ANOTHER letsencrypt certificates can work.

Variants:

1) for newer system, like Ubuntu 18.04 - update ca-certificates package , that mark DST Root CA X3 as expired and "untrusted", then "self-signed" ISRG Root X1will be used as trusted root CA cert

2) manualy mark DST Root CA X3 as expired - see https://github.com/bigbluebutton/bigbluebutton/issues/6139#issuecomment-932679845

3) same as 2) maybe for Ubuntu 16.04, but 16.04 has old openssl, as for openssl <1.0.2, so DST Root should be removed and "self-signed" ISRG Root X1should be imported (from https://letsencrypt.org/certificates/, for example) - see https://github.com/bigbluebutton/bigbluebutton/issues/10381#issuecomment-932126264 (that why "--preferred-chain" also fix ptroblem )