# Automatic renew fail

**URL:** <https://community.letsencrypt.org/t/automatic-renew-fail/26895>\
**Category:** Help\
**Created:** [February 1, 2017, 1:15pm UTC](https://community.letsencrypt.org/t/automatic-renew-fail/26895 "2017-02-01T13:15:16Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![configbox](https://avatars.discourse-cdn.com/v4/letter/c/dfb087/32.png) [@configbox](https://community.letsencrypt.org/u/configbox)\
**Post date:** [February 1, 2017, 1:15pm UTC](https://community.letsencrypt.org/t/automatic-renew-fail/26895/1 "2017-02-01T13:15:16Z")

</div>

Hi

I have an server with centos7 and nginx web server with 3 domains. I create Let’s encrypt SSL without problem for them, and have renew all SSL one time, the next month, with and simple script :

/root/letsencrypt/letsencrypt-auto renew  
/usr/sbin/nginx -t && service nginx reload

But now I always have the same error when I try to use this script :

Renewing an existing certificate  
Performing the following challenges:  
http-01 challenge for [XXXXX.net](http://XXXXX.net)  
http-01 challenge for [www.XXXXX.net](http://www.XXXXX.net)  
Using the webroot path /var/www for all unmatched domains.  
Waiting for verification…  
Cleaning up challenges  
Attempting to renew cert from /etc/letsencrypt/renewal/XXXXX.net.conf produced an unexpected error: ‘ascii’ codec can’t encode character u’\xe1’ in position 250: ordinal not in range(128). Skipping.

None of domain are IDN domain, I have do no change in python library and don’t understand the bug, Can you help me?

Thanks a lot!

---

<div class="post-metadata">

**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\
**Post date:** [February 1, 2017, 2:32pm UTC](https://community.letsencrypt.org/t/automatic-renew-fail/26895/2 "2017-02-01T14:32:59Z")

</div>

> [@configbox](#):
>
> Attempting to renew cert from /etc/letsencrypt/renewal/XXXXX.net.conf produced an unexpected error: 'ascii' codec can't encode character u'\xe1' in position 250: ordinal not in range(128)

This is the key part. There is an invalid character in that file. can you check the file ? alternatively can you paste the full file in [pastebin.com](http://pastebin.com) or somewhere so we can review it ?

---

<div class="post-metadata">

**Author:** ![configbox](https://avatars.discourse-cdn.com/v4/letter/c/dfb087/32.png) [@configbox](https://community.letsencrypt.org/u/configbox)\
**Post date:** [February 1, 2017, 2:49pm UTC](https://community.letsencrypt.org/t/automatic-renew-fail/26895/3 "2017-02-01T14:49:30Z")

</div>

if you refer to /etc/letsencrypt/renewal/XXXXX.net.conf file, the contain is this one (Sorry, I prefer hidden real domai name by XXXXX, but no special char in it)

# renew\_before\_expiry = 30 days

version = 0.9.3  
cert = /etc/letsencrypt/live/XXXXX.net/cert.pem  
privkey = /etc/letsencrypt/live/XXXXX.net/privkey.pem  
chain = /etc/letsencrypt/live/XXXXX.net/chain.pem  
fullchain = /etc/letsencrypt/live/XXXXX.net/fullchain.pem

# Options used in the renewal process

[renewalparams]  
authenticator = webroot  
installer = nginx  
account = 7ef54115e4f79a2b8780ecca13b9efa4  
server = [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)  
webroot\_path = /var/www,  
[[webroot\_map]]  
[XXXXX.net](http://XXXXX.net) = /var/www  
[www.XXXXX.net](http://www.XXXXX.net) = /var/www

---

<div class="post-metadata">

**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\
**Post date:** [February 1, 2017, 2:52pm UTC](https://community.letsencrypt.org/t/automatic-renew-fail/26895/4 "2017-02-01T14:52:31Z")

</div>

The problem is, as soon as you edit it - then the special char will probably get removed. hence asking for you to paste the complete file. I suggested pastebin, as that can be pasted for a limited amount of time, and then removed ( say 15 mins )

---

<div class="post-metadata">

**Author:** ![configbox](https://avatars.discourse-cdn.com/v4/letter/c/dfb087/32.png) [@configbox](https://community.letsencrypt.org/u/configbox)\
**Post date:** [February 1, 2017, 4:10pm UTC](https://community.letsencrypt.org/t/automatic-renew-fail/26895/5 "2017-02-01T16:10:49Z")

</div>

> [@serverco](#):
>
> pastebin

Ohhh, I have found the problem... None of the vhosts have the ".well-known/acme-challenge" correct config, so they will return to 404 page that give the ascii error!  
Putting the correct config ( location ~ /.well-known/acme-challenge { root /var/www; } in our case ) all work!

Thanks a lot serveco, with your answer I discover the problem!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [March 3, 2017, 4:13pm UTC](https://community.letsencrypt.org/t/automatic-renew-fail/26895/6 "2017-03-03T16:13:55Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
