Let's Encrypt requires web access to the hidden directory .well-known/acme-challenge to renew SSL certifications. Limesurvey recently added .htaccess rules blocking access to hidden directories, blocking Let's Encrypt access. I temporarily removed the rule.

Drupal had a similar issue and modified the RewriteRule to read: I am a rewrite newbie, so I have not tried to update the Limesurvey .htaccess rule.

Regards, Norbert

Yes, this need to be fixed …

DenisChenu wrote: Yes, this need to be fixed …

You already spoted the issue and posted a remark here:
github.com/LimeSurvey/LimeSurvey/commit/...2b8ebf88c296104c5d2c

More and more provider and controlpanels are already applying the exceptions for .well-known on the webserver level. Beside Let's Encrypt there are other ones (e.g. Comodo SSL). Still make sense for LimeSurvey to allow access to subdirectories of .well-known

Perhaps adding this:
More about .well-known can be found here: tools.ietf.org/html/rfc5785

github.com/LimeSurvey/LimeSurvey/commit/...eb399b469f33d81e31ae
and
github.com/LimeSurvey/LimeSurvey/commit/...f10a063b29485cb9d2e5

Denis, two updates applied and successfully tested. Let's Encrypt is working, but access to folders like .gitignore remain blocked.

Thanks, Norbert