Page 1 of 1

Let Sencrypt renew error

Posted: Thu Nov 24, 2016 5:06 pm
by Loc_rabbirt
Hi,

I got error below when I tried renew let sencrypt, I'm beginner in vps so I don't know what going on and how to resolve it. Need some help, thank you.

Code: Select all

[root@server ~]# /opt/le/letsencrypt-auto renew
/root/.local/share/letsencrypt/lib/python2.6/site-packages/cryptography/__init__.py:26: DeprecationWarning: Python 2.6 is no longer supported by the Python core team, please upgrade your Python. A future version of cryptography will drop support for Python 2.6
  DeprecationWarning
Saving debug log to /var/log/letsencrypt/letsencrypt.log

-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/xxx.conf
-------------------------------------------------------------------------------
expected /etc/letsencrypt/live/xxx/cert.pem to be a symlink
Renewal configuration file /etc/letsencrypt/renewal/xxx.conf is broken. Skipping.

-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/xxx-0001.conf
-------------------------------------------------------------------------------
Cert not yet due for renewal

The following certs are not due for renewal yet:
  /etc/letsencrypt/live/xxx-0001/fullchain.pem (skipped)
No renewals were attempted.

Additionally, the following renewal configuration files were invalid:
  /etc/letsencrypt/renewal/xxx.conf (parsefail)
0 renew failure(s), 1 parse failure(s)

Re: Let Sencrypt renew error

Posted: Fri Nov 25, 2016 7:31 am
by Loc_rabbirt
Really need any help

Re: Let Sencrypt renew error

Posted: Fri Nov 25, 2016 12:13 pm
by tjebbeke
It looks like you are not using the Vesta cp integration of let's encrypt?
If you use the default let's encrypt I guess it's better the read their forum.

You need to renew the certificates only, Vesta CP has it own configuration. Let's encrypt do not know that you are using VestaCP so it can't find the right config files.

Re: Let Sencrypt renew error

Posted: Fri Nov 25, 2016 12:23 pm
by Loc_rabbirt
tjebbeke wrote:It looks like you are not using the Vesta cp integration of let's encrypt?
If you use the default let's encrypt I guess it's better the read their forum.

You need to renew the certificates only, Vesta CP has it own configuration. Let's encrypt do not know that you are using VestaCP so it can't find the right config files.
Thank you so much, after trying many way. I can renew the cert. Unfortunately, now all domain got new error: refused to connect.

Trying rebuild web many times but no luck. A problem wait in weekend.

Re: Let Sencrypt renew error

Posted: Fri Nov 25, 2016 12:49 pm
by tjebbeke
Do you have any error when you rebuild?
I think today or one of the next days the new vesta version is released with let's encrypt support.

Re: Let Sencrypt renew error

Posted: Sat Nov 26, 2016 12:15 am
by mestresan
vesta-letsencrypt cli stopped worked in .17

I receive this error in final process

# letsencrypt-vesta -a 60 aaaaaa aaaaaaa.com
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for ocuriosox.com
http-01 challenge for http://www.aaaaaaa.com
Using the webroot path /etc/letsencrypt/webroot for all unmatched domains.
Waiting for verification...
Cleaning up challenges
Generating key (2048 bits): /etc/letsencrypt/keys/0003_key-certbot.pem
Creating CSR: /etc/letsencrypt/csr/0003_csr-certbot.pem

IMPORTANT NOTES:
- Congratulations! Your certificate and chain have been saved at
/etc/letsencrypt/live/aaaaaaaaaa.com/fullchain.pem. Your cert will
expire on 2017-02-23. To obtain a new or tweaked version of this
certificate in the future, simply run certbot-auto again. To
non-interactively renew *all* of your certificates, run
"certbot-auto renew"
- If you like Certbot, please consider supporting our work by:

Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
Donating to EFF: https://eff.org/donate-le

Error: SSL=no doesn't exist
Reloading nginx configuration (via systemctl): [ OK ]
job 4 at Tue Jan 24 22:07:00 2017
Renewal scheduled for 60 days.



New Option in panel dont work ...
Error: LetsEncrypt account registration 400

Re: Let Sencrypt renew error

Posted: Sat Nov 26, 2016 11:12 am
by Loc_rabbirt
tjebbeke wrote:Do you have any error when you rebuild?
I think today or one of the next days the new vesta version is released with let's encrypt support.
I don't got any errors when I tried rebuild. There is any cli to debug what going on? I don't know next steps to debug it. Everything I have is read error log.

Re: Let Sencrypt renew error

Posted: Sat Nov 26, 2016 11:15 am
by Loc_rabbirt
mestresan wrote:vesta-letsencrypt cli stopped worked in .17

I receive this error in final process

New Option in panel dont work ...
Error: LetsEncrypt account registration 400
I tried with original script, so I don't know what is happen in your side.

Re: Let Sencrypt renew error

Posted: Thu Jan 05, 2017 8:43 pm
by cyfocus
Any solution for "Error: SSL=no doesn't exist"? I'm stuck. I followed the instruction from http://www.servermom.org/install-lets-e ... tacp/3208/