Auto renewal of certificates failed


#1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: wfu.aumtech.com

I ran this command: certbot renew

It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log


Processing /etc/letsencrypt/renewal/wfu.aumtech.com.conf


Cert is due for renewal, auto-renewing…

Plugins selected: Authenticator standalone, Installer None

Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org

Attempting to renew cert (wfu.aumtech.com) from /etc/letsencrypt/renewal/wfu.aumtech.com.conf produced an unexpected error: urn:acme:error:serverInternal :: The server experienced an internal error :: The service is down for maintenance or had an internal error. Check https://letsencrypt.status.io/ for more details… Skipping.

All renewal attempts failed. The following certs could not be renewed:

/etc/letsencrypt/live/wfu.aumtech.com/fullchain.pem (failure)


All renewal attempts failed. The following certs could not be renewed:

/etc/letsencrypt/live/wfu.aumtech.com/fullchain.pem (failure)


1 renew failure(s), 0 parse failure(s)

My web server is (include version): nodejs 8.11.1

The operating system my web server runs on is (include version): CentOS Linux release 7.5.1804 (Core)

My hosting provider, if applicable, is: NA

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No.


#2

Hi @devendra

if you have such an error: Wait one or two hours, try it again.

But: You have one certificate created today:

https://transparencyreport.google.com/https/certificates?cert_search_auth=&cert_search_cert=&cert_search=include_expired:false;include_subdomains:false;domain:wfu.aumtech.com&lu=cert_search

Oh - I see, you have already a new certificate:

https://wfu.aumtech.com/

So it looks ok :wink:


#3

Hi,

I waited and tried again and it worked! Thank you!

Kind Regards,
Devendra Phadke


#4

You may have been renewing right when Let’s Encrypt was performing an update:

https://letsencrypt.status.io/pages/maintenance/55957a99e800baa4470002da/5b69d74d1196ed41fe9cc8de


#5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.