Error to open litd - recently install

I install LND on a new node today following the ramix guide, then RTL following the raspibolt guide which both works fine, but then litd not not working, I get this error while trying to connect:

Error when creating LND Services client: error subscribing to lnd wallet state: lnd version incompatible, need at least v0.13.0-beta, got error on state subscription: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority"
LND is not running. Please start lnd and try again.

It's an arm machine with debian 13 and knots version 28.1 and LND 19.3

[Roasbeef]

It looks like it's unable to connect to the lnd node, as it doesn't think the cert is valid.

I think you can try to remove the old tls.cert and tls.key, then restart the daemons.

Just did it removing both with rm tls.cert tls.key inside cd ~/.lnd but still get the same error:

Error when creating LND Services client: error subscribing to lnd wallet state: lnd version incompatible, need at least v0.13.0-beta, got error on state subscription: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority"
LND is not running. Please start lnd and try again.

[djkazic]

@rdmxq did you observe the tls.cert and tls.key files being recreated when you restarted litd? You can check their timestamps with ls -lah.

@rdmxq did you observe the tls.cert and tls.key files being recreated when you restarted litd? You can check their timestamps with ls -lah.

I check the folder where I removed the previous ones and there were new ones:
admin@ramix:~/.lnd$ ls -lah
total 40K
drwxr-xr-x 5 lnd lnd 4.0K Oct 3 20:44 .
drwxr-xr-x 10 admin admin 4.0K Oct 3 18:15 ..
drwx--x--- 5 lnd lnd 4.0K Oct 3 15:30 data
drwx------ 2 lnd lnd 4.0K Oct 3 15:30 letsencrypt
-rw-rw-r-- 1 lnd lnd 2.6K Oct 3 20:00 lnd.conf
drwx------ 3 lnd lnd 4.0K Oct 3 15:30 logs
-rw------- 1 lnd lnd 66 Oct 3 15:26 password.txt
-rw-r--r-- 1 lnd lnd 769 Oct 3 15:34 tls.cert
-rw------- 1 lnd lnd 267 Oct 3 15:34 tls.key
-rw------- 1 lnd lnd 99 Oct 3 20:39 v3_onion_private_key

Maybe there's something wrong in my config file?

# RaMiX: lnd configuration
# /data/lnd/lnd.conf

[Application Options]
# The alias your node will use, which can be up to 32 UTF-8 characters in length
alias=<YOUR_FANCY_ALIAS>

# The color of the node in hex format, used to customize node appearance in 
# intelligence services
color=#ff9900

# Automatically unlock wallet with the password in this file
wallet-unlock-password-file=/data/lnd/password.txt
wallet-unlock-allow-create=true

# Do not archive the history of the channel.backup file
no-backup-archive=true

# The maximum number of incoming pending channels permitted per peer
maxpendingchannels=5

# The TLS private key will be encrypted to the node's seed
tlsencryptkey=true

# Automatically regenerate certificate when near expiration
tlsautorefresh=true

# Do not include the interface IPs or the system hostname in TLS certificate
tlsdisableautofill=true

## Channel settings
# (Optional) Minimum channel size. Uncomment and set to your preference
# (default: 20000 sats)
#minchansize=20000

## (Optional) High fee environment settings
#max-commit-fee-rate-anchors=10
#max-channel-fee-allocation=0.5

## Communication
accept-keysend=true
accept-amp=true

## Rebalancing
allow-circular-route=true

## Performance
gc-canceled-invoices-on-startup=true
gc-canceled-invoices-on-the-fly=true
ignore-historical-gossip-filters=true

[Bitcoin]
bitcoin.mainnet=true
bitcoin.node=bitcoind

# Fee settings - default LND base fee = 1000 (mSat), fee rate = 1 (ppm)
# You can choose whatever you want e.g ZeroFeeRouting (0,0) or ZeroBaseFee (0,X)
#bitcoin.basefee=1000
#bitcoin.feerate=1

# (Optional) Specify the CLTV delta we will subtract from a forwarded HTLC's timelock value
# (default: 80)
#bitcoin.timelockdelta=80

[protocol]
protocol.wumbo-channels=true
protocol.option-scid-alias=true
protocol.simple-taproot-chans=true
protocol.zero-conf=true
protocol.rbf-coop-close=true

[wtclient]
## Watchtower client settings
wtclient.active=true

# (Optional) Specify the fee rate with which justice transactions will be signed
# (default: 10 sat/byte)
#wtclient.sweep-fee-rate=10

[watchtower]
## Watchtower server settings
watchtower.active=true

[routing]
routing.strictgraphpruning=true

[db]
## Database selection
db.backend=postgres

[postgres]
db.postgres.dsn=postgresql://admin:admin@127.0.0.1:5432/lndb?sslmode=disable
db.postgres.timeout=0

## (Optional) High fee environment settings
# (default: CONSERVATIVE) Uncomment the next 2 lines
#[Bitcoind]
#bitcoind.estimatemode=ECONOMICAL

[tor]
tor.active=true
tor.v3=true
tor.streamisolation=true

#[rpcmiddleware]
rpcmiddleware.enable=true

[djkazic]

Your config looks okay. What does litcli status show?

Your config looks okay. What does litcli status show?

I ended up removing litd and reinstalling and it works now