Problem with Certificate Auto Renew Let's Encrypt

[kbtechno]

I am continously getting this messages for different user : Error during automated certificate renewal for "xxxx.com"
Let's Encrypt auto renew failing. Can anyone help me.

 

[cmyden]

Is there anything else to the error message? In my case, I was also getting the following error:

CSR config file /usr/local/directadmin/data/users/user/domains/domain.com.san_config passed but does not exist or is empty.
ls: cannot access /usr/local/directadmin/data/users/user/domains/domain.com.san_config: No such file or directory

If that's the error you are getting, see my latest post in this thread:

Let's Encrypt: Certificate won't renew for one particular domain (.san_conf error)

On my fairly recent (August) DirectAdmin install, on a server with 10 domains, I've been receiving the following error message once a day: CSR config file /usr/local/directadmin/data/users/admin/domains/domain.com.san_config passed but does not exist or is empty. ls: cannot access...

forum.directadmin.com

 

[kbtechno]

retry due to: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/authz-v3/26111267540 :: urn:ietfarams:acme:error:badNonce :: JWS has an invalid anti-replay nonce: "0001FyxE742ilyIkMFaTJuiKqnA0-QyjIeCbtTA3KrEpmjY"

this is the error when i check notification of failure.

 

[ikkeben]

Did you check in browser wich certificate is on that domain and the domain names as www non www mail. are there as you configed them?

Also the ending date of that.

Then tried to renew manually also?

 

[kbtechno]

Yes i tried to nenew manually and it works. but it should also work on automatic.

 

[Active8]

It seems that LE somehow is buggy.
Sometimes one of our server did not get hostname certificate automatically but an manual request works, still cant figure out why

 

[MaXi32]

I thought with the auto SSL feature, we all don't have to worry about SSL anymore.

 

[TomB1]

Auto renewal is not working on ubuntu 20.04 with directadmin. Every day failures and they expire on 10 oct.

Let's Encrypt - Ubuntu 20.04

Hello, I have issues with Let's Encrypt renewal at the moment. The error on all domain in DA: domain.com was skipped due to unreachable http://domain.com/.well-known/acme-challenge/ file. www.domain.com was skipped due to unreachable http://www.domain.com/.well-known/acme-challenge/ file. No...

forum.directadmin.com

It looks like a bug in directadmin. I've never had any problems before. fyi: it works with the standalone let's encrypt bot.

@cmyden your solution is not working for me.

 

[cimaserver]

I present a similar problem, some domains do not auto generate ssl.

 

[TomB1]

I present a similar problem, some domains do not auto generate ssl.

Try this:

Let's Encrypt - Ubuntu 20.04

Hello, I have issues with Let's Encrypt renewal at the moment. The error on all domain in DA: domain.com was skipped due to unreachable http://domain.com/.well-known/acme-challenge/ file. www.domain.com was skipped due to unreachable http://www.domain.com/.well-known/acme-challenge/ file. No...

forum.directadmin.com

or this:

Let's Encrypt: Certificate won't renew for one particular domain (.san_conf error)

Im reporting the same problem with the automatic renewal of SSL certificates. Every 3 months the renewal fails with subject title `Subject: Error during automated certificate renewal for domain.com`: CSR config file /usr/local/directadmin/data/users/user/domains/domain.com.san_config passed...

forum.directadmin.com

 

[alwaysbusy]

Had also the same problems on some domains with auto renew the last days...

 

[cimaserver]

85% of the domains do not want to auto-renew, many of us report the same problem, nobody has gotten a solution?

 

[ikkeben]

UH versions for support are important though?

OS used and version

DA version
Custombuild version
LE script version

External dns?
YES no cloudlinux

Yes no....? CLOUDFLARE

YEs no wildcard ?

ONly basic www and non www.?

And some more please help DA Support with info's you have..

Log files ..

Even Skin GUI used..

More info's about this?

Let's Encrypt: Certificate won't renew for one particular domain (.san_conf error)

Im reporting the same problem with the automatic renewal of SSL certificates. Every 3 months the renewal fails with subject title `Subject: Error during automated certificate renewal for domain.com`: CSR config file /usr/local/directadmin/data/users/user/domains/domain.com.san_config passed...

forum.directadmin.com

 

[TomB1]

85% of the domains do not want to auto-renew, many of us report the same problem, nobody has gotten a solution?

View attachment 4805

This works for me:
Go to your admin panel > CustomBuild 2.0 > Customize Versions > letsencrypt_sh > Version 2.0.16 & delete the MD5 hash.
There is something wrong with the LE modules after 2.0.16. (works with or without cloudflare)

See: https://forum.directadmin.com/threads/lets-encrypt-ubuntu-20-04.64571/

 

[damador]

Challenge pre-checks for http://radzikow.ski/.well-known/acme-challenge/letsencrypt_1632992450_65b3b6d5fbf2173e failed... Command:
/usr/local/bin/curl --connect-timeout 40 -k --silent --resolve radzikow.ski:80:2606:4700:3030::ac43:8866 --resolve radzikow.ski:443:2606:4700:3030::ac43:8866 -I -L -X GET http://radzikow.ski/.well-known/acme-challenge/letsencrypt_1632992450_65b3b6d5fbf2173e
Exiting.

nope - still 2.0.16 @ cloudflare

 

[BillyS]

Is there a fix for this? Auto renewal doesnt work and when I try to renew manually, the system keeps asking for new certificates even though it has valid ones.

 

[wtptrs]

There are a lot of different error messages posted in this thread, so it's difficult to say anything about your issue. Could you post the specific error message you receive + the OS / Custombuild / Let's Encrypt script version?