Autorenew issue

thinkdez · February 27, 2018, 11:12pm

I ran this command: Command is run through cron:
30 2 * * 1 /usr/bin/letsencrypt renew >> /var/log/le-renew.log

It produced this output:
Log file shows the following:
Processing /etc/letsencrypt/renewal/cloud.factory-tech.com.conf

All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/cloud.factory-tech.com/fullchain.pem (failure)

However when I manually run: ‘letsencrypt renew’

I get the following output:

Processing /etc/letsencrypt/renewal/cloud.factory-tech.com.conf
new certificate deployed with reload of apache server; fullchain is /etc/letsencrypt/live/cloud.factory-tech.com/fullchain.pem

Congratulations, all renewals succeeded. The following certs have been renewed:
/etc/letsencrypt/live/cloud.factory-tech.com/fullchain.pem (success)

Why is the crontab failing but I can manually run it and succeed at updating the cert?

My web server is (include version):Server version: Apache/2.4.18 (Ubuntu)

The operating system my web server runs on is (include version): Ubuntu 16.04.3 LTS

My hosting provider, if applicable, is: N/A

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No

schoen · February 27, 2018, 11:15pm

Hi @thinkdez,

That’s interesting! Could you post the log files from /var/log/letsencrypt associated with both attempts?

thinkdez · February 28, 2018, 1:16am

Sorry I tried to upload but it won’t let me as a new user. Here is a dump of the unsuccessful attempt:

2018-02-26 07:30:01,595:DEBUG:letsencrypt.cli:Root logging level set at 30
2018-02-26 07:30:01,596:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2018-02-26 07:30:01,597:DEBUG:letsencrypt.cli:letsencrypt version: 0.4.1
2018-02-26 07:30:01,597:DEBUG:letsencrypt.cli:Arguments: []
2018-02-26 07:30:01,598:DEBUG:letsencrypt.cli:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2018-02-26 07:30:01,607:DEBUG:letsencrypt.cli:Requested authenticator and installer
2018-02-26 07:30:01,607:DEBUG:letsencrypt.cli:Default Detector is Namespace(account=’’, agree_dev_preview=None, apache=’’, apache_challenge_location=’/etc/apache2’, apache_ctl=None, apache_dismod=‘a2dismod’, apache_enmod=‘a2enmod’, apache_handle_modules=True, apache_handle_sites=True, apache_init_script=None, apache_le_vhost_ext=’-le-ssl.conf’, apache_server_root=’/etc/apache2’, apache_vhost_root=’/etc/apache2/sites-available’, authenticator=’’, break_my_certs=’’, cert_path=’/root’, chain_path=None, checkpoints=0, config_dir=’’, config_file=None, configurator=’’, csr=’’, debug=’’, domains=[], dry_run=’’, duplicate=’’, email=’’, expand=’’, fullchain_path=None, func=<function renew at 0x7f53d9015938>, hsts=False, http01_port=0, ifaces=’’, init=’’, installer=’’, key_path=’/root’, logs_dir=’’, manual=’’, manual_public_ip_logging_ok=False, manual_test_mode=False, nginx=’’, no_self_upgrade=’’, no_verify_ssl=False, noninteractive_mode=’’, os_packages_only=’’, prepare=’’, redirect=None, register_unsafely_without_email=’’, reinstall=’’, renew_by_default=’’, rsa_key_size=0, server=’’, staging=’’, standalone=’’, standalone_supported_challenges=‘tls-sni-01,http-01’, store_false_vars={’–no-uir’: True, <letsencrypt.cli.HelpfulArgumentParser object at 0x7f53dbb60810>: True, ‘–no-redirect’: True, ‘–no-hsts’: True}, strict_permissions=’’, text_mode=’’, tls_sni_01_port=0, tos=’’, uir=None, user_agent=None, verb=‘renew’, verbose_count=0, version=’’, webroot=’’, webroot_map={}, webroot_path=[], work_dir=’’)
2018-02-26 07:30:01,613:DEBUG:parsedatetime:parse (top of loop): [30 days][]
2018-02-26 07:30:01,620:DEBUG:parsedatetime:CRE_UNITS matched
2018-02-26 07:30:01,621:DEBUG:parsedatetime:parse (bottom) [][30 days][][]
2018-02-26 07:30:01,621:DEBUG:parsedatetime:weekday False, dateStd False, dateStr False, time False, timeStr False, meridian False
2018-02-26 07:30:01,621:DEBUG:parsedatetime:dayStr False, modifier False, modifier2 False, units True, qunits False
2018-02-26 07:30:01,621:DEBUG:parsedatetime:_evalString(30 days, time.struct_time(tm_year=2018, tm_mon=2, tm_mday=26, tm_hour=7, tm_min=30, tm_sec=1, tm_wday=0, tm_yday=57, tm_isdst=0))
2018-02-26 07:30:01,621:DEBUG:parsedatetime:_buildTime: [30 ][][days]
2018-02-26 07:30:01,621:DEBUG:parsedatetime:units days --> realunit days
2018-02-26 07:30:01,621:DEBUG:parsedatetime:return
2018-02-26 07:30:01,621:DEBUG:letsencrypt.storage:Should renew, less than 30 days before certificate expiry 2018-03-08 13:34:21 UTC.
2018-02-26 07:30:01,621:INFO:letsencrypt.cli:Cert is due for renewal, auto-renewing…
2018-02-26 07:30:01,622:DEBUG:letsencrypt.cli:Requested authenticator apache and installer apache
2018-02-26 07:30:01,623:DEBUG:letsencrypt.plugins.disco:No installation (PluginEntryPoint#apache):
Traceback (most recent call last):
File “/usr/lib/python2.7/dist-packages/letsencrypt/plugins/disco.py”, line 103, in prepare
self._initialized.prepare()
File “/usr/lib/python2.7/dist-packages/letsencrypt_apache/configurator.py”, line 152, in prepare
raise errors.NoInstallationError
NoInstallationError
2018-02-26 07:30:01,623:DEBUG:letsencrypt.display.ops:No candidate plugin
2018-02-26 07:30:01,624:DEBUG:letsencrypt.display.ops:No candidate plugin
2018-02-26 07:30:01,624:DEBUG:letsencrypt.cli:Selected authenticator None and installer None
2018-02-26 07:30:01,624:INFO:letsencrypt.cli:Could not choose appropriate plugin: The apache plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError()
2018-02-26 07:30:01,625:WARNING:letsencrypt.cli:Attempting to renew cert from /etc/letsencrypt/renewal/cloud.factory-tech.com.conf produced an unexpected error: The apache plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError(). Skipping.
2018-02-26 07:30:01,625:DEBUG:letsencrypt.cli:Traceback was:
Traceback (most recent call last):
File “/usr/lib/python2.7/dist-packages/letsencrypt/cli.py”, line 1017, in renew
obtain_cert(lineage_config, plugins, renewal_candidate)
File “/usr/lib/python2.7/dist-packages/letsencrypt/cli.py”, line 683, in obtain_cert
installer, authenticator = choose_configurator_plugins(config, plugins, “certonly”)
File “/usr/lib/python2.7/dist-packages/letsencrypt/cli.py”, line 635, in choose_configurator_plugins
diagnose_configurator_problem(“authenticator”, req_auth, plugins)
File “/usr/lib/python2.7/dist-packages/letsencrypt/cli.py”, line 536, in diagnose_configurator_problem
raise errors.PluginSelectionError(msg)
PluginSelectionError: The apache plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError()

2018-02-26 07:30:01,625:DEBUG:letsencrypt.cli:Exiting abnormally:
Traceback (most recent call last):
File “/usr/bin/letsencrypt”, line 9, in
load_entry_point(‘letsencrypt==0.4.1’, ‘console_scripts’, ‘letsencrypt’)()
File “/usr/lib/python2.7/dist-packages/letsencrypt/cli.py”, line 1986, in main
return config.func(config, plugins)
File “/usr/lib/python2.7/dist-packages/letsencrypt/cli.py”, line 1034, in renew
len(renew_failures), len(parse_failures)))
Error: 1 renew failure(s), 0 parse failure(s)

thinkdez · February 28, 2018, 1:17am

And here is the successful attempt part 1:

2018-02-27 23:04:25,890:DEBUG:letsencrypt.cli:Root logging level set at 30
2018-02-27 23:04:25,891:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2018-02-27 23:04:25,892:DEBUG:letsencrypt.cli:letsencrypt version: 0.4.1
2018-02-27 23:04:25,892:DEBUG:letsencrypt.cli:Arguments: []
2018-02-27 23:04:25,893:DEBUG:letsencrypt.cli:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2018-02-27 23:04:25,902:DEBUG:letsencrypt.cli:Requested authenticator and installer
2018-02-27 23:04:25,902:DEBUG:letsencrypt.cli:Default Detector is Namespace(account=’’, agree_dev_preview=None, apache=’’, apache_challenge_location=’/etc/apache2’, apache_ctl=None, apache_dismod=‘a2dismod’, apache_enmod=‘a2enmod’, apache_handle_modules=True, apache_handle_sites=True, apache_init_script=None, apache_le_vhost_ext=’-le-ssl.conf’, apache_server_root=’/etc/apache2’, apache_vhost_root=’/etc/apache2/sites-available’, authenticator=’’, break_my_certs=’’, cert_path=’/var/log’, chain_path=None, checkpoints=0, config_dir=’’, config_file=None, configurator=’’, csr=’’, debug=’’, domains=[], dry_run=’’, duplicate=’’, email=’’, expand=’’, fullchain_path=None, func=<function renew at 0x7f45fcfbd938>, hsts=False, http01_port=0, ifaces=’’, init=’’, installer=’’, key_path=’/var/log’, logs_dir=’’, manual=’’, manual_public_ip_logging_ok=False, manual_test_mode=False, nginx=’’, no_self_upgrade=’’, no_verify_ssl=False, noninteractive_mode=’’, os_packages_only=’’, prepare=’’, redirect=None, register_unsafely_without_email=’’, reinstall=’’, renew_by_default=’’, rsa_key_size=0, server=’’, staging=’’, standalone=’’, standalone_supported_challenges=‘tls-sni-01,http-01’, store_false_vars={’–no-hsts’: True, ‘–no-uir’: True, <letsencrypt.cli.HelpfulArgumentParser object at 0x7f45ffb05050>: True, ‘–no-redirect’: True}, strict_permissions=’’, text_mode=’’, tls_sni_01_port=0, tos=’’, uir=None, user_agent=None, verb=‘renew’, verbose_count=0, version=’’, webroot=’’, webroot_map={}, webroot_path=[], work_dir=’’)
2018-02-27 23:04:25,908:DEBUG:parsedatetime:parse (top of loop): [30 days][]
2018-02-27 23:04:25,916:DEBUG:parsedatetime:CRE_UNITS matched
2018-02-27 23:04:25,917:DEBUG:parsedatetime:parse (bottom) [][30 days][][]
2018-02-27 23:04:25,917:DEBUG:parsedatetime:weekday False, dateStd False, dateStr False, time False, timeStr False, meridian False
2018-02-27 23:04:25,917:DEBUG:parsedatetime:dayStr False, modifier False, modifier2 False, units True, qunits False
2018-02-27 23:04:25,917:DEBUG:parsedatetime:evalString(30 days, time.struct_time(tm_year=2018, tm_mon=2, tm_mday=27, tm_hour=23, tm_min=4, tm_sec=25, tm_wday=1, tm_yday=58, tm_isdst=0))
2018-02-27 23:04:25,917:DEBUG:parsedatetime:buildTime: [30 ][][days]
2018-02-27 23:04:25,917:DEBUG:parsedatetime:units days --> realunit days
2018-02-27 23:04:25,917:DEBUG:parsedatetime:return
2018-02-27 23:04:25,917:DEBUG:letsencrypt.storage:Should renew, less than 30 days before certificate expiry 2018-03-08 13:34:21 UTC.
2018-02-27 23:04:25,917:INFO:letsencrypt.cli:Cert is due for renewal, auto-renewing…
2018-02-27 23:04:25,918:DEBUG:letsencrypt.cli:Requested authenticator apache and installer apache
2018-02-27 23:04:26,270:DEBUG:letsencrypt.display.ops:Single candidate plugin: * apache
Description: Apache Web Server - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = letsencrypt_apache.configurator:ApacheConfigurator
Initialized: <letsencrypt_apache.configurator.ApacheConfigurator object at 0x7f45ffb14610>
Prep: True
2018-02-27 23:04:26,271:DEBUG:letsencrypt.display.ops:Single candidate plugin: * apache
Description: Apache Web Server - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = letsencrypt_apache.configurator:ApacheConfigurator
Initialized: <letsencrypt_apache.configurator.ApacheConfigurator object at 0x7f45ffb14610>
Prep: True
2018-02-27 23:04:26,272:DEBUG:letsencrypt.cli:Selected authenticator <letsencrypt_apache.configurator.ApacheConfigurator object at 0x7f45ffb14610> and installer <letsencrypt_apache.configurator.ApacheConfigurator object at 0x7f45ffb14610>
2018-02-27 23:04:27,287:DEBUG:letsencrypt.cli:Picked account: <Account(5274106d00f13231a5e9d5ebee2672e0)>
2018-02-27 23:04:27,288:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
2018-02-27 23:04:27,347:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2018-02-27 23:04:29,023:DEBUG:requests.packages.urllib3.connectionpool:“GET /directory HTTP/1.1” 200 280
2018-02-27 23:04:29,025:DEBUG:root:Received <Response [200]>. Headers: {‘Content-Length’: ‘280’, ‘Expires’: ‘Tue, 27 Feb 2018 23:04:29 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Tue, 27 Feb 2018 23:04:29 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘k6mARxN5PiCs9TNCht9dz3wFFnjYUgJhsytFio79pE8’}. Content: '{\n “new-authz”: “https://acme-v01.api.letsencrypt.org/acme/new-authz”,\n “new-cert”: “https://acme-v01.api.letsencrypt.org/acme/new-cert”,\n “new-reg”: “https://acme-v01.api.letsencrypt.org/acme/new-reg”,\n “revoke-cert”: “https://acme-v01.api.letsencrypt.org/acme/revoke-cert”\n}'
2018-02-27 23:04:29,026:DEBUG:acme.client:Received response <Response [200]> (headers: {‘Content-Length’: ‘280’, ‘Expires’: ‘Tue, 27 Feb 2018 23:04:29 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Tue, 27 Feb 2018 23:04:29 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘k6mARxN5PiCs9TNCht9dz3wFFnjYUgJhsytFio79pE8’}): ‘{\n “new-authz”: “https://acme-v01.api.letsencrypt.org/acme/new-authz”,\n “new-cert”: “https://acme-v01.api.letsencrypt.org/acme/new-cert”,\n “new-reg”: “https://acme-v01.api.letsencrypt.org/acme/new-reg”,\n “revoke-cert”: “https://acme-v01.api.letsencrypt.org/acme/revoke-cert”\n}‘
2018-02-27 23:04:29,195:INFO:letsencrypt.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0010_key-letsencrypt.pem
2018-02-27 23:04:29,221:INFO:letsencrypt.crypto_util:Creating CSR: /etc/letsencrypt/csr/0010_csr-letsencrypt.pem
2018-02-27 23:04:29,222:DEBUG:letsencrypt.client:CSR: CSR(file=’/etc/letsencrypt/csr/0010_csr-letsencrypt.pem’, data='0\x82\x02\x9a0\x82\x01\x82\x02\x01\x020!1\x1f0\x1d\x06\x03U\x04\x03\x0c\x16cloud.factory-tech.com0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xde\x1de\xcc\xa2[b\xb7\xb9~\x1d\xd5\xa1\xf19wy\xa9\xef\xb3\xf1\xc5\xb7\x1b\x02\x19\xff"\xb3\xadO\xe0\x17\x98Sz)\xe1\xe3\x9a1\xef$a\xd2&\x104_\x03\r\xaa\n\xa1m\xd0\x8ag\xd6\xa6\xd5+\xa0\xea\x81\\!\x1fjO\xc3,\xb2SC\‘i\xacjEn\xb7\xf3\x11\x1c\x8a\xd9\xa6\x130\x1e3b\ts\xc3X\x15\xca:\xd1\x8fJ\x94\xed\xca\x96V7_\xa20\x96N\x96\xb4I\xf0XT\xb8\x85v\xae\x97\xb3\x9d\x13\xdf\x9d\x04<\xe5PzM\xc7\x80\x7f\x9a\x02:\x8e\x93\xcf\x05]\xfc\x14fs\xe5\xe2\xad\x8bx\xfe\r\xf3\x9c{t\x83>R\xc0\x12\xfcV<rvA\xf2e8\xc5,\xc4\xb85\xaa\xb3\x1d\xa6t\xb3sea\xd2\x90\x1c\xf8\x85\xcb:\xeb\x94s\xd1\xb6N\x8bt\x91\xdb\xe0k\xd9\x8a\x1e\x18\x1b\xf0t\xc0(o\xd6\x8fb\xdd\x00\x8bV9\\xa2\xdao\x10\xd7\x18#;\xdc\xd6I"\x147\xef\x9a\x8f\x08f\xb5\x95\x82’\xb9\xc6\x81\x02\x03\x01\x00\x01\xa0402\x06\t*\x86H\x86\xf7\r\x01\t\x0e1%0#0!\x06\x03U\x1d\x11\x04\x1a0\x18\x82\x16cloud.factory-tech.com0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00\\x0cjq\xfd\x07\xa9g\xc6\x0c\xadT@\x0c\xdf\x8c~ \xbc\x88\x8b\x7f\x7f\xb53\xf8\x80X\xbfv\xa1\xdf\xa0\xaf\xe6\xefi7e\xff\xf2\xb2\x93Z\xfb\xebg\x9bE1[w\x11zH\xccv\xd1\xaaI\xa3\xc6\xb6@\x15\xf8\x18\xe5\x9b\xd3I\xf2a\x9e\x147\x85&G\xa7]\xa5\xd6\xc1\x9d\xa8\xf8C\xd5\xaf)4$J\xa9)\xb3m\xae,\x1a\xca:\xc9\x9aZ\x83h\x11Xu\x90J-\xb9\x19\x7f\xbefMO\xb2\xfc\xbd\xe2e\xf1]B\x82\xeeY\x1cY\xb0\xcbVC\xe7\xc3\x0b<\xf2\xa0\xde\xf2uyb\xd43\xe1\xde\xc0e\xf4XG1\xb1\x95r\xad\xc4,'6\xc3\xb5\x9cJi\xd4j\x9f\xb3\xde\x98\x7f8\xc8\xff\xfe\xac\x17\r\xd7b\xde\x90\xab\xb4\x1d!q4\xaa\xa0+\x80\x89\xb2oh\xe8\xe1\x8e\x06\xb9~\xd0\x1e5\xe05a\xb1\x06C\x04\x81A>0\x8b0H\xc3\xf4\x1d\xbb\x9c\x0e\xc1\x96\xb3\xd4\xee\xc2R36\x15\x9fU\xc4H\x833\x17(\x1b’, form=‘der’), domains: [‘cloud.factory-tech.com’]

thinkdez · February 28, 2018, 1:22am

Part 2:
2018-02-27 23:04:29,222:DEBUG:root:Requesting fresh nonce
2018-02-27 23:04:29,222:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {}
2018-02-27 23:04:29,223:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2018-02-27 23:04:30,529:DEBUG:requests.packages.urllib3.connectionpool:“HEAD /acme/new-authz HTTP/1.1” 405 0
2018-02-27 23:04:30,531:DEBUG:root:Received <Response [405]>. Headers: {‘Content-Length’: ‘91’, ‘Pragma’: ‘no-cache’, ‘Expires’: ‘Tue, 27 Feb 2018 23:04:30 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Allow’: ‘POST’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Tue, 27 Feb 2018 23:04:30 GMT’, ‘Content-Type’: ‘application/problem+json’, ‘Replay-Nonce’: ‘ggh5CwQrOvdud5UNffzfgfrKT2gaeaP2H8rVAtpOHcg’}. Content: ‘‘
2018-02-27 23:04:30,532:DEBUG:acme.client:Storing nonce: ‘\x82\x08y\x0b\x04+:\xf7nw\x95\r}\xfc\xdf\x81\xfa\xcaOh\x1ay\xa3\xf6\x1f\xca\xd5\x02\xdaN\x1d\xc8’
2018-02-27 23:04:30,532:DEBUG:acme.jose.json_util:Omitted empty fields: challenges=None, combinations=None, status=None, expires=None
2018-02-27 23:04:30,532:DEBUG:acme.client:Serialized JSON: {“identifier”: {“type”: “dns”, “value”: “cloud.factory-tech.com”}, “resource”: “new-authz”}
2018-02-27 23:04:30,533:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), x5tS256=None, cty=None, jku=None, x5u=None, x5t=None, alg=None, kid=None, jwk=None, typ=None, crit=()
2018-02-27 23:04:30,606:DEBUG:acme.jose.json_util:Omitted empty fields: x5t=None, x5c=(), x5tS256=None, cty=None, jku=None, x5u=None, nonce=None, crit=(), kid=None, typ=None
2018-02-27 23:04:30,607:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “l864ls8G5ShpQRsI5CQS7VnXuUeWCUjIyES6GQypw6EPN0y8f74Uvzj95fHj9rLcE2KlJNDT_7S-OrhqADp1MlE33nU7_1O2Gte96d1z9kjJFoTHm6pJHa68Kj8U5rgw7lV0_YTlpyZhUzDCVWUkZQD0v8zQQac_LwRR53PlzgPIaHLK34jLOW64gVbOiOC1-yYWqVQktDwzbYXUOOYTAcI-8cfwRZ1_TJyI7D7_3yf2NYycn_vigJXCbh3Y_P_DukJuxLlq1qLBhOLGsQYjoflZrxTU5UXAdxZ8A3PbBeE_2dQiThPy7474nvSCN1BaFNEXyExIdjMMEHP2kQ2f6w”}}, “protected”: “eyJub25jZSI6ICJnZ2g1Q3dRck92ZHVkNVVOZmZ6ZmdmcktUMmdhZWFQMkg4clZBdHBPSGNnIn0”, “payload”: “eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJjbG91ZC5mYWN0b3J5LXRlY2guY29tIn0sICJyZXNvdXJjZSI6ICJuZXctYXV0aHoifQ”, “signature”: “aiijGISo7w3Ec7xevvMujfOUB8scWS7OgA5wfsoxBPO9MkAoHkIAsvg9ylsU1Xgg67GUennWWIoqPUltb-t3N9f7wQlD6e4vRFiS-9nSz98RxhqmBClXd59wSIHWWuhdbtl7SkJnBAu5SS7C0lncWkqkSiJ4kpBPz63wdV0E5qukh9hEiBBEOBxmrMy_tjfKvDxn_-S1EE_4SKvOT5_EIiVave1QhMRWPmiW8gus4vrT34X8BPo1504aE991i3wz6MbN1M3pMRSzd5SQr0W35-Z8p32I9ElivgyLcVa6aOP73Sb7zSRvtjkfs9Msrkp3nOJ_wj7NL1eT3q1_iwoPlw”}’}
2018-02-27 23:04:30,608:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2018-02-27 23:04:33,264:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/new-authz HTTP/1.1” 201 1010
2018-02-27 23:04:33,266:DEBUG:root:Received <Response [201]>. Headers: {‘Content-Length’: ‘1010’, ‘Expires’: ‘Tue, 27 Feb 2018 23:04:33 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM’, ‘Pragma’: ‘no-cache’, ‘Boulder-Requester’: ‘5070522’, ‘Date’: ‘Tue, 27 Feb 2018 23:04:33 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘o2kJUMK5XqLE0MVOVY55j_vsEWAHbZ–O-EZME8kGwo’}. Content: ‘{\n “identifier”: {\n “type”: “dns”,\n “value”: “cloud.factory-tech.com”\n },\n “status”: “pending”,\n “expires”: “2018-03-06T23:04:33.016203389Z”,\n “challenges”: [\n {\n “type”: “http-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940767”,\n “token”: “9KQ_hQuD_q2mU9Fwy5XB2hNi8MIlxYCesaWemv2SZ74”\n },\n {\n “type”: “dns-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940770”,\n “token”: “pgjknmTCpiyWuojndyJNDO9A84kTacHAS_01RBFGtbk”\n },\n {\n “type”: “tls-sni-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771”,\n “token”: “ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0”\n }\n ],\n “combinations”: [\n [\n 2\n ],\n [\n 1\n ],\n [\n 0\n ]\n ]\n}‘
2018-02-27 23:04:33,266:DEBUG:acme.client:Storing nonce: ‘\xa3i\tP\xc2\xb9^\xa2\xc4\xd0\xc5NU\x8ey\x8f\xfb\xec\x11`\x07m\x9f\xbe;\xe1\x190O$\x1b\n’
2018-02-27 23:04:33,267:DEBUG:acme.client:Received response <Response [201]> (headers: {‘Content-Length’: ‘1010’, ‘Expires’: ‘Tue, 27 Feb 2018 23:04:33 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM’, ‘Pragma’: ‘no-cache’, ‘Boulder-Requester’: ‘5070522’, ‘Date’: ‘Tue, 27 Feb 2018 23:04:33 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘o2kJUMK5XqLE0MVOVY55j_vsEWAHbZ–O-EZME8kGwo’}): ‘{\n “identifier”: {\n “type”: “dns”,\n “value”: “cloud.factory-tech.com”\n },\n “status”: “pending”,\n “expires”: “2018-03-06T23:04:33.016203389Z”,\n “challenges”: [\n {\n “type”: “http-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940767”,\n “token”: “9KQ_hQuD_q2mU9Fwy5XB2hNi8MIlxYCesaWemv2SZ74”\n },\n {\n “type”: “dns-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940770”,\n “token”: “pgjknmTCpiyWuojndyJNDO9A84kTacHAS_01RBFGtbk”\n },\n {\n “type”: “tls-sni-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771”,\n “token”: “ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0”\n }\n ],\n “combinations”: [\n [\n 2\n ],\n [\n 1\n ],\n [\n 0\n ]\n ]\n}‘
2018-02-27 23:04:33,267:DEBUG:acme.challenges:dns-01 was not recognized, full message: {u’status’: u’pending’, u’token’: u’pgjknmTCpiyWuojndyJNDO9A84kTacHAS_01RBFGtbk’, u’type’: u’dns-01’, u’uri’: u’https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940770’}
2018-02-27 23:04:33,268:INFO:letsencrypt.auth_handler:Performing the following challenges:
2018-02-27 23:04:33,268:INFO:letsencrypt.auth_handler:tls-sni-01 challenge for cloud.factory-tech.com
2018-02-27 23:04:33,906:DEBUG:letsencrypt_apache.tls_sni_01:Adding Include /etc/apache2/le_tls_sni_01_cert_challenge.conf to /files/etc/apache2/apache2.conf
2018-02-27 23:04:33,906:DEBUG:letsencrypt_apache.tls_sni_01:writing a config file with text:

thinkdez · February 28, 2018, 1:23am

Part 3:

<VirtualHost *:443>
ServerName 7c2703c51b2e07fb80e3e0f90fbd9b2e.a712b8c8a6457a864852d880dc926122.acme.invalid
UseCanonicalName on
SSLStrictSNIVHostCheck on

LimitRequestBody 1048576

Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /var/lib/letsencrypt/ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0.crt
SSLCertificateKeyFile /var/lib/letsencrypt/ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0.pem

DocumentRoot /var/lib/letsencrypt/tls_sni_01_page/

2018-02-27 23:04:34,116:DEBUG:letsencrypt.reverter:Creating backup of /etc/apache2/apache2.conf
2018-02-27 23:04:37,330:INFO:letsencrypt.auth_handler:Waiting for verification…
2018-02-27 23:04:37,330:DEBUG:acme.client:Serialized JSON: {“keyAuthorization”: “ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0.5rH6NAf5Kc3LmePRbmNR_4h78uyd-yE-7hga4JUmEOk”, “type”: “tls-sni-01”, “resource”: “challenge”}
2018-02-27 23:04:37,331:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), x5tS256=None, cty=None, jku=None, x5u=None, x5t=None, alg=None, kid=None, jwk=None, typ=None, crit=()
2018-02-27 23:04:37,334:DEBUG:acme.jose.json_util:Omitted empty fields: x5t=None, x5c=(), x5tS256=None, cty=None, jku=None, x5u=None, nonce=None, crit=(), kid=None, typ=None
2018-02-27 23:04:37,335:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771. args: (), kwargs: {‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “l864ls8G5ShpQRsI5CQS7VnXuUeWCUjIyES6GQypw6EPN0y8f74Uvzj95fHj9rLcE2KlJNDT_7S-OrhqADp1MlE33nU7_1O2Gte96d1z9kjJFoTHm6pJHa68Kj8U5rgw7lV0_YTlpyZhUzDCVWUkZQD0v8zQQac_LwRR53PlzgPIaHLK34jLOW64gVbOiOC1-yYWqVQktDwzbYXUOOYTAcI-8cfwRZ1_TJyI7D7_3yf2NYycn_vigJXCbh3Y_P_DukJuxLlq1qLBhOLGsQYjoflZrxTU5UXAdxZ8A3PbBeE_2dQiThPy7474nvSCN1BaFNEXyExIdjMMEHP2kQ2f6w”}}, “protected”: “eyJub25jZSI6ICJvMmtKVU1LNVhxTEUwTVZPVlk1NWpfdnNFV0FIYlotLU8tRVpNRThrR3dvIn0”, “payload”: “eyJrZXlBdXRob3JpemF0aW9uIjogImVoWlI2WjZja3E1SG9DOGI0Z2VERVFSWlZiOFVoUHFBQmxIbmdzYlJPRzAuNXJINk5BZjVLYzNMbWVQUmJtTlJfNGg3OHV5ZC15RS03aGdhNEpVbUVPayIsICJ0eXBlIjogInRscy1zbmktMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0”, “signature”: “crgxfFb605h9p1GyFhqH5XTGJ3kvWaBdLx-EDLMo8Y05ELVfthblapweQsgPpB5QGAh3eyrmC1NgTao-Zv5htN6Z_S0GixHf2Vg-BObsC_ixWT8fJ8VmBoGvHgkwpQ08CPyNUf0KxkjC4xWBNxZon3uFDdPGI5EEQynuaLzNlA5OuE5F9bOdjKO1BEcQ391-HwtHv4MISZkpjTNxivkKnjh_alNmMHz2iOe5QdcRMunaoDGgPkQmAia1PxnJItLMRd4GTBU5XKCucA-tX65AzXzJW2LOUOmkZep085jY2OOgwMSGaUCXAN-nlFI-SR1ZkpR_p1KUluNBa1s22SykCw”}’}
2018-02-27 23:04:37,336:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2018-02-27 23:04:39,978:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771 HTTP/1.1” 202 339
2018-02-27 23:04:39,980:DEBUG:root:Received <Response [202]>. Headers: {‘Content-Length’: ‘339’, ‘Expires’: ‘Tue, 27 Feb 2018 23:04:39 GMT’, ‘Server’: ‘nginx’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM;rel=“up”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771’, ‘Pragma’: ‘no-cache’, ‘Boulder-Requester’: ‘5070522’, ‘Date’: ‘Tue, 27 Feb 2018 23:04:39 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘HMXBpnDn56M8JAECujgcXgZMupaKS9CaqmB_-q5qkvA’}. Content: ‘{\n “type”: “tls-sni-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771”,\n “token”: “ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0”,\n “keyAuthorization”: “ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0.5rH6NAf5Kc3LmePRbmNR_4h78uyd-yE-7hga4JUmEOk”\n}‘
2018-02-27 23:04:39,981:DEBUG:acme.client:Storing nonce: ‘\x1c\xc5\xc1\xa6p\xe7\xe7\xa3<$\x01\x02\xba8\x1c^\x06L\xba\x96\x8aK\xd0\x9a\xaa\x7f\xfa\xaej\x92\xf0' 2018-02-27 23:04:39,981:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '339', 'Expires': 'Tue, 27 Feb 2018 23:04:39 GMT', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771', 'Pragma': 'no-cache', 'Boulder-Requester': '5070522', 'Date': 'Tue, 27 Feb 2018 23:04:39 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'HMXBpnDn56M8JAECujgcXgZMupaKS9CaqmB_-q5qkvA'}): '{\n "type": "tls-sni-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771",\n "token": "ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0",\n "keyAuthorization": "ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0.5rH6NAf5Kc3LmePRbmNR_4h78uyd-yE-7hga4JUmEOk"\n}' 2018-02-27 23:04:42,985:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM. args: (), kwargs: {} 2018-02-27 23:04:42,986:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org 2018-02-27 23:04:43,991:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM HTTP/1.1" 200 1362 2018-02-27 23:04:43,993:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1362', 'Expires': 'Tue, 27 Feb 2018 23:04:43 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 27 Feb 2018 23:04:43 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'mLRLIT24zyZlLBN01rk-QFI9ZKIzXijh918cth6I6R8'}. Content: '{\n "identifier": {\n "type": "dns",\n "value": "cloud.factory-tech.com"\n },\n "status": "valid",\n "expires": "2018-03-29T23:04:40Z",\n "challenges": [\n {\n "type": "http-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940767",\n "token": "9KQ_hQuD_q2mU9Fwy5XB2hNi8MIlxYCesaWemv2SZ74"\n },\n {\n "type": "dns-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940770",\n "token": "pgjknmTCpiyWuojndyJNDO9A84kTacHAS_01RBFGtbk"\n },\n {\n "type": "tls-sni-01",\n "status": "valid",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771",\n "token": "ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0",\n "keyAuthorization": "ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0.5rH6NAf5Kc3LmePRbmNR_4h78uyd-yE-7hga4JUmEOk",\n "validationRecord": [\n {\n "hostname": "cloud.factory-tech.com",\n "port": "443",\n "addressesResolved": [\n "184.146.214.118"\n ],\n "addressUsed": "184.146.214.118"\n }\n ]\n }\n ],\n "combinations": [\n [\n 2\n ],\n [\n 1\n ],\n [\n 0\n ]\n ]\n}' 2018-02-27 23:04:43,994:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '1362', 'Expires': 'Tue, 27 Feb 2018 23:04:43 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 27 Feb 2018 23:04:43 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'mLRLIT24zyZlLBN01rk-QFI9ZKIzXijh918cth6I6R8'}): '{\n "identifier": {\n "type": "dns",\n "value": "cloud.factory-tech.com"\n },\n "status": "valid",\n "expires": "2018-03-29T23:04:40Z",\n "challenges": [\n {\n "type": "http-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940767",\n "token": "9KQ_hQuD_q2mU9Fwy5XB2hNi8MIlxYCesaWemv2SZ74"\n },\n {\n "type": "dns-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940770",\n "token": "pgjknmTCpiyWuojndyJNDO9A84kTacHAS_01RBFGtbk"\n },\n {\n "type": "tls-sni-01",\n "status": "valid",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940771",\n "token": "ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0",\n "keyAuthorization": "ehZR6Z6ckq5HoC8b4geDEQRZVb8UhPqABlHngsbROG0.5rH6NAf5Kc3LmePRbmNR_4h78uyd-yE-7hga4JUmEOk",\n "validationRecord": [\n {\n "hostname": "cloud.factory-tech.com",\n "port": "443",\n "addressesResolved": [\n "184.146.214.118"\n ],\n "addressUsed": "184.146.214.118"\n }\n ]\n }\n ],\n "combinations": [\n [\n 2\n ],\n [\n 1\n ],\n [\n 0\n ]\n ]\n}' 2018-02-27 23:04:43,994:DEBUG:acme.challenges:dns-01 was not recognized, full message: {u'status': u'pending', u'token': u'pgjknmTCpiyWuojndyJNDO9A84kTacHAS_01RBFGtbk', u'type': u'dns-01', u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/BtngaX1aJ2MnPCrvs7hvO6yVlI0UnST7DqcSaEYxWoM/3627940770'} 2018-02-27 23:04:43,995:INFO:letsencrypt.auth_handler:Cleaning up challenges 2018-02-27 23:04:44,269:DEBUG:acme.client:Requesting issuance... 2018-02-27 23:04:44,269:DEBUG:acme.client:Serialized JSON: {"resource": "new-cert", "csr": "MIICmjCCAYICAQIwITEfMB0GA1UEAwwWY2xvdWQuZmFjdG9yeS10ZWNoLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN4dZcyiW2K3uX4d1aHxOXd5qe-z8cW3GwIZ_yKzrU_gF5hTeinh45ox7yRh0iYQNF8DDaoKoW3QimfWptUroOqBXCEfak_DLLJTQydprGpFbrfzERyK2aYTMB4zYglzw1gVyjrRj0qU7cqWVjdfojCWTpa0SfBYVLiFdq6Xs50T350EPOVQek3HgH-aAjqOk88FXfwUZnPl4q2LeP4N85x7dIM-UsAS_FY8cnZB8mU4xSzEuDWqsx2mdLNzZWHSkBz4hcs665Rz0bZOi3SR2-Br2YoeGBvwdMAoKm_Wj2LdAItWOVyi2m8Q1xgjO9zWSSoiFDfvmo8IZrWVgie5xoECAwEAAaA0MDIGCSqGSIb3DQEJDjElMCMwIQYDVR0RBBowGIIWY2xvdWQuZmFjdG9yeS10ZWNoLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAXAxqcf1fB6lnxgytVEAM34x-ILyIi39_tTP4gFi_dqHfoK_m72k3Zf_yspNa--tnm0UxW3cRekjMdtGqSaPGtkAV-Bjlm9NJ8mGeFDeFJkenXaXWwZ2o-EPVryk0JEqpKbNtriwayjrJmlqDaBFYdZBKLbkZf75mTU-y_L3iZfFgXUKC7lkcWbDLVkPnwws8YPKg3vJ1eWLUM-HewGX0WEcxsZVyrcQsJzbDtZxKadRqn7PemH84yP_-rBcN12LekKu0HSFxNF-qoCuAibJvaOjhjga5ftAeNeA1YbEGQwSBQT4wizBIw_Qdu5wOwZaz1O7CUjM2FZ9VxEiDMxcoGw"} 2018-02-27 23:04:44,270:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), x5tS256=None, cty=None, jku=None, x5u=None, x5t=None, alg=None, kid=None, jwk=None, typ=None, crit=() 2018-02-27 23:04:44,278:DEBUG:acme.jose.json_util:Omitted empty fields: x5t=None, x5c=(), x5tS256=None, cty=None, jku=None, x5u=None, nonce=None, crit=(), kid=None, typ=None 2018-02-27 23:04:44,278:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-cert. args: (), kwargs: {'headers': {'Accept': 'application/pkix-cert'}, 'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "l864ls8G5ShpQRsI5CQS7VnXuUeWCUjIyES6GQypw6EPN0y8f74Uvzj95fHj9rLcE2KlJNDT_7S-OrhqADp1MlE33nU7_1O2Gte96d1z9kjJFoTHm6pJHa68Kj8U5rgw7lV0_YTlpyZhUzDCVWUkZQD0v8zQQac_LwRR53PlzgPIaHLK34jLOW64gVbOiOC1-yYWqVQktDwzbYXUOOYTAcI-8cfwRZ1_TJyI7D7_3yf2NYycn_vigJXCbh3Y_P_DukJuxLlq1qLBhOLGsQYjoflZrxTU5UXAdxZ8A3PbBeE_2dQiThPy7474nvSCN1BaFNEXyExIdjMMEHP2kQ2f6w"}}, "protected": "eyJub25jZSI6ICJITVhCcG5EbjU2TThKQUVDdWpnY1hnWk11cGFLUzlDYXFtQl8tcTVxa3ZBIn0", "payload": "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", "signature": "fMVKrQ6ZHSPRSEseD-galkQI1mIsEbOXM2GgxtqBZJ02LdUWUOWiA_CumWRQfMhJycimIp0zNz6us9et5jZT-JgT205nX1YPvZ0mYz4kfX_vRAvdY5GF70h5GArEl97ZOeQ8dIdDhgV4f-3g-xvshwZqHV6rP2JfjkbXicRrBlsH8VqWG7JfwlZ8iani8pRuGaMi3KLV47fsJhhA_C9DBqNUMvKVuvRSSBmY3GTQjI3IkZPkjzmTxbg_7jGtFfJyDjHPYsNPhivQ_GlLqSw-ncvPlIt6BUVLVCNdnY3zbr5ril-7Qh-LTlLVITlABUgtMYs7upjoEf2LmG_5ehdwIA"}'} 2018-02-27 23:04:44,284:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org 2018-02-27 23:04:46,898:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-cert HTTP/1.1" 201 1299 2018-02-27 23:04:46,900:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '1299', 'Expires': 'Tue, 27 Feb 2018 23:04:46 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/issuer-cert>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/cert/0376d3aefc1572b6df96242fafd5262e1c92', 'Pragma': 'no-cache', 'Boulder-Requester': '5070522', 'Date': 'Tue, 27 Feb 2018 23:04:46 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/pkix-cert', 'Replay-Nonce': 'J8qs7In5fEoqnZnDQ-f-F0DpN-8NpIxoxKoVJ5seoAo'}. Content: '0\x82\x05\x0f0\x82\x03\xf7\xa0\x03\x02\x01\x02\x02\x12\x03v\xd3\xae\xfc\x15r\xb6\xdf\x96$/\xaf\xd5&.\x1c\x920\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000J1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x160\x14\x06\x03U\x04\n\x13\rLet\'s Encrypt1#0!\x06\x03U\x04\x03\x13\x1aLet\'s Encrypt Authority X30\x1e\x17\r180227220446Z\x17\r180528220446Z0!1\x1f0\x1d\x06\x03U\x04\x03\x13\x16cloud.factory-tech.com0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xde\x1de\xcc\xa2[b\xb7\xb9~\x1d\xd5\xa1\xf19wy\xa9\xef\xb3\xf1\xc5\xb7\x1b\x02\x19\xff"\xb3\xadO\xe0\x17\x98Sz)\xe1\xe3\x9a1\xef$a\xd2&\x104_\x03\r\xaa\n\xa1m\xd0\x8ag\xd6\xa6\xd5+\xa0\xea\x81\\!\x1fjO\xc3,\xb2SC\'i\xacjEn\xb7\xf3\x11\x1c\x8a\xd9\xa6\x130\x1e3b\ts\xc3X\x15\xca:\xd1\x8fJ\x94\xed\xca\x96V7_\xa20\x96N\x96\xb4I\xf0XT\xb8\x85v\xae\x97\xb3\x9d\x13\xdf\x9d\x04<\xe5PzM\xc7\x80\x7f\x9a\x02:\x8e\x93\xcf\x05]\xfc\x14fs\xe5\xe2\xad\x8bx\xfe\r\xf3\x9c{t\x83>R\xc0\x12\xfcV<rvA\xf2e8\xc5,\xc4\xb85\xaa\xb3\x1d\xa6t\xb3sea\xd2\x90\x1c\xf8\x85\xcb:\xeb\x94s\xd1\xb6N\x8bt\x91\xdb\xe0k\xd9\x8a\x1e\x18\x1b\xf0t\xc0(*o\xd6\x8fb\xdd\x00\x8bV9\\\xa2\xdao\x10\xd7\x18#;\xdc\xd6I*"\x147\xef\x9a\x8f\x08f\xb5\x95\x82\'\xb9\xc6\x81\x02\x03\x01\x00\x01\xa3\x82\x02\x160\x82\x02\x120\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x05\xa00\x1d\x06\x03U\x1d%\x04\x160\x14\x06\x08+\x06\x01\x05\x05\x07\x03\x01\x06\x08+\x06\x01\x05\x05\x07\x03\x020\x0c\x06\x03U\x1d\x13\x01\x01\xff\x04\x020\x000\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14k\xfb\x15\xc9m\x08\x19\xee\xa4S\x9a1a\xd1\xae\xd4\x82\xa7\xe60\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xa8Jjc\x04}\xdd\xba\xe6\xd19\xb7\xa6Ee\xef\xf3\xa8\xec\xa10o\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x04c0a0.\x06\x08+\x06\x01\x05\x05\x070\x01\x86"http://ocsp.int-x3.letsencrypt.org0/\x06\x08+\x06\x01\x05\x05\x070\x02\x86#http://cert.int-x3.letsencrypt.org/0!\x06\x03U\x1d\x11\x04\x1a0\x18\x82\x16cloud.factory-tech.com0\x81\xfe\x06\x03U\x1d \x04\x81\xf60\x81\xf30\x08\x06\x06g\x81\x0c\x01\x02\x010\x81\xe6\x06\x0b+\x06\x01\x04\x01\x82\xdf\x13\x01\x01\x010\x81\xd60&\x06\x08+\x06\x01\x05\x05\x07\x02\x01\x16\x1ahttp://cps.letsencrypt.org0\x81\xab\x06\x08+\x06\x01\x05\x05\x07\x02\x020\x81\x9e\x0c\x81\x9bThis Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00\x0c%j\xd5\xb4\xf1\rO\xfd\xbf\x9d\xe7{0\xbap\x1c\xc9\x1d\x04’\xe5;F\xea\xdd\x01;\xfe\xed@\xb8\xff\x02\xcd\xaf\x9f\xf9\x9a|\xd1W\xa4\xa2\x9b\xe0Q\xa9I\xe1\xd1K.T5\x0cG\xc6a\xcd2r\x87g\x14g!\xe4\xfc\x107\xd4U\xb7\x94<\x7f!\x9a\xae\xc06U\x98\x85\x9f@\x18Y\x9b\xcfQ\x08\x8f\x98\xe3\x85\x95Tq\xf4\x1e8\xe2D\x8fc\x183\xd1\xa0\xe5\xce.*\x8f\xbc=7\x96H\x93\xddV\xbd7\xb4\x10\r\xaf\xe0\xf60\xc8\xc5\xfeld\xf2\x89[\xc4\xe9T3\x1a\xd5kN\xaa\xb5\xac\x97N*\xc4=_5\'u6z\x97k",\xcf\x904\xa6\x19\xabo\xe5\xb8\xbc\x92\x08fJ\xef(r\x1a\xb4#\xb0\x03DsNq\x04\xc3%&\xb4=7\xd0q\x9b\x9a\xaf\x1b\xc7\xfat\x933\xbf\xc3sz\x95\xdb\x96\t\xd3e\xdd9\xb7u\xab6\xa2\xee|\xb5\x83\xe0\xa2\xddO\x8c\x08.9\xf8^\x87\x18(\x14\xc00\xb4\x11*\xf5j[3' 2018-02-27 23:04:46,901:DEBUG:acme.client:Storing nonce: "'\xca\xac\xec\x89\xf9|J*\x9d\x99\xc3C\xe7\xfe\x17@\xe97\xef\r\xa4\x8ch\xc4\xaa\x15'\x9b\x1e\xa0\n" 2018-02-27 23:04:46,901:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '1299', 'Expires': 'Tue, 27 Feb 2018 23:04:46 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/issuer-cert>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/cert/0376d3aefc1572b6df96242fafd5262e1c92', 'Pragma': 'no-cache', 'Boulder-Requester': '5070522', 'Date': 'Tue, 27 Feb 2018 23:04:46 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/pkix-cert', 'Replay-Nonce': 'J8qs7In5fEoqnZnDQ-f-F0DpN-8NpIxoxKoVJ5seoAo'}): '0\x82\x05\x0f0\x82\x03\xf7\xa0\x03\x02\x01\x02\x02\x12\x03v\xd3\xae\xfc\x15r\xb6\xdf\x96$/\xaf\xd5&.\x1c\x920\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000J1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x160\x14\x06\x03U\x04\n\x13\rLet\'s Encrypt1#0!\x06\x03U\x04\x03\x13\x1aLet\'s Encrypt Authority X30\x1e\x17\r180227220446Z\x17\r180528220446Z0!1\x1f0\x1d\x06\x03U\x04\x03\x13\x16cloud.factory-tech.com0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xde\x1de\xcc\xa2[b\xb7\xb9~\x1d\xd5\xa1\xf19wy\xa9\xef\xb3\xf1\xc5\xb7\x1b\x02\x19\xff"\xb3\xadO\xe0\x17\x98Sz)\xe1\xe3\x9a1\xef$a\xd2&\x104_\x03\r\xaa\n\xa1m\xd0\x8ag\xd6\xa6\xd5+\xa0\xea\x81\\!\x1fjO\xc3,\xb2SC\'i\xacjEn\xb7\xf3\x11\x1c\x8a\xd9\xa6\x130\x1e3b\ts\xc3X\x15\xca:\xd1\x8fJ\x94\xed\xca\x96V7_\xa20\x96N\x96\xb4I\xf0XT\xb8\x85v\xae\x97\xb3\x9d\x13\xdf\x9d\x04<\xe5PzM\xc7\x80\x7f\x9a\x02:\x8e\x93\xcf\x05]\xfc\x14fs\xe5\xe2\xad\x8bx\xfe\r\xf3\x9c{t\x83>R\xc0\x12\xfcV<rvA\xf2e8\xc5,\xc4\xb85\xaa\xb3\x1d\xa6t\xb3sea\xd2\x90\x1c\xf8\x85\xcb:\xeb\x94s\xd1\xb6N\x8bt\x91\xdb\xe0k\xd9\x8a\x1e\x18\x1b\xf0t\xc0(*o\xd6\x8fb\xdd\x00\x8bV9\\\xa2\xdao\x10\xd7\x18#;\xdc\xd6I*"\x147\xef\x9a\x8f\x08f\xb5\x95\x82\'\xb9\xc6\x81\x02\x03\x01\x00\x01\xa3\x82\x02\x160\x82\x02\x120\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x05\xa00\x1d\x06\x03U\x1d%\x04\x160\x14\x06\x08+\x06\x01\x05\x05\x07\x03\x01\x06\x08+\x06\x01\x05\x05\x07\x03\x020\x0c\x06\x03U\x1d\x13\x01\x01\xff\x04\x020\x000\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14k\xfb\x15\xc9m\x08\x19\xee\xa4S\x9a1a\xd1\xae\xd4\x82\xa7\xe60\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xa8Jjc\x04}\xdd\xba\xe6\xd19\xb7\xa6Ee\xef\xf3\xa8\xec\xa10o\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x04c0a0.\x06\x08+\x06\x01\x05\x05\x070\x01\x86"http://ocsp.int-x3.letsencrypt.org0/\x06\x08+\x06\x01\x05\x05\x070\x02\x86#http://cert.int-x3.letsencrypt.org/0!\x06\x03U\x1d\x11\x04\x1a0\x18\x82\x16cloud.factory-tech.com0\x81\xfe\x06\x03U\x1d \x04\x81\xf60\x81\xf30\x08\x06\x06g\x81\x0c\x01\x02\x010\x81\xe6\x06\x0b+\x06\x01\x04\x01\x82\xdf\x13\x01\x01\x010\x81\xd60&\x06\x08+\x06\x01\x05\x05\x07\x02\x01\x16\x1ahttp://cps.letsencrypt.org0\x81\xab\x06\x08+\x06\x01\x05\x05\x07\x02\x020\x81\x9e\x0c\x81\x9bThis Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00\x0c%j\xd5\xb4\xf1\rO\xfd\xbf\x9d\xe7{0\xbap\x1c\xc9\x1d\x04’\xe5;F\xea\xdd\x01;\xfe\xed@\xb8\xff\x02\xcd\xaf\x9f\xf9\x9a|\xd1W\xa4\xa2\x9b\xe0Q\xa9I\xe1\xd1K.T5\x0cG\xc6a\xcd2r\x87g\x14g!\xe4\xfc\x107\xd4U\xb7\x94<\x7f!\x9a\xae\xc06U\x98\x85\x9f@\x18Y\x9b\xcfQ\x08\x8f\x98\xe3\x85\x95Tq\xf4\x1e8\xe2D\x8fc\x183\xd1\xa0\xe5\xce.*\x8f\xbc=7\x96H\x93\xddV\xbd7\xb4\x10\r\xaf\xe0\xf60\xc8\xc5\xfeld\xf2\x89[\xc4\xe9T3\x1a\xd5kN\xaa\xb5\xac\x97N*\xc4=_5\'u6z\x97k",\xcf\x904\xa6\x19\xabo\xe5\xb8\xbc\x92\x08fJ\xef(r\x1a\xb4#\xb0\x03DsNq\x04\xc3%&\xb4=7\xd0q\x9b\x9a\xaf\x1b\xc7\xfat\x933\xbf\xc3sz\x95\xdb\x96\t\xd3e\xdd9\xb7u\xab6\xa2\xee|\xb5\x83\xe0\xa2\xddO\x8c\x08.9\xf8^\x87\x18(\x14\xc00\xb4\x11*\xf5j[3' 2018-02-27 23:04:47,073:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/issuer-cert. args: (), kwargs: {'headers': {'Accept': 'application/pkix-cert'}} 2018-02-27 23:04:47,074:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org 2018-02-27 23:04:48,220:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/issuer-cert HTTP/1.1" 200 1174 2018-02-27 23:04:48,223:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1174', 'Expires': 'Tue, 27 Feb 2018 23:04:48 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 27 Feb 2018 23:04:48 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/pkix-cert', 'Replay-Nonce': 'KnmzHYuCksitoNM7tAItZHygXMNJeyzx2eCEZ3vY45g'}. Content: '0\x82\x04\x920\x82\x03z\xa0\x03\x02\x01\x02\x02\x10\n\x01AB\x00\x00\x01S\x85sj\x0b\x85\xec\xa7\x080\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000?1$0"\x06\x03U\x04\n\x13\x1bDigital Signature Trust Co.1\x170\x15\x06\x03U\x04\x03\x13\x0eDST Root CA X30\x1e\x17\r160317164046Z\x17\r210317164046Z0J1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x160\x14\x06\x03U\x04\n\x13\rLet\'s Encrypt1#0!\x06\x03U\x04\x03\x13\x1aLet\'s Encrypt Authority X30\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\x9c\xd3\x0c\xf0Z\xe5.G\xb7r]7\x83\xb3hc0\xea\xd75&\x19%\xe1\xbd\xbe5\xf1p\x92/\xb7\xb8KA\x05\xab\xa9\x9e5\x08X\xec\xb1*\xc4h\x87\x0b\xa3\xe3u\xe4\xe6\xf3\xa7bq\xbay\x81\x1f\xd7\x91\x9a\x9f\xf3\xd0xgq\xc8i\x0e\x95\x91\xcf\xfe\xe6\x99\xe9<H\xcc~\xcaMw\x12$\x9dG\x1bZ\xeb\xb9\xec\x1e7\x00\x1c\x9c\xac{\xa7\x05\xea\xceJ\xeb\xbdA\xe56\x98\xb9\xcb\xfdm<\x96h\xdf#*B\x90\x0c\x86tg\xc8\x7f\xa5\x9a\xb8Ra\x14\x13?e\xe9\x82\x87\xcb\xdb\xfa\x0eV\xf6\x86\x89\xf3\x85?\x97\x86\xaf\xb0\xdc\x1a\xefk\r\x95\x16}\xc4+\xa0e\xb2\x99\x046u\x80k\xacJ\xf3\x1b\x90Ix/\xa2\x96O* %)\x04\xc6t\xc0\xd01\xcd\x8f18\x95\x16\xba\xa83\xb8C\xf1\xb1\x1f\xc30\x7f\xa2y1\x13=-6\xf8\xe3\xfc\xf23j\xb991\xc5\xaf\xc4\x8d\r\x1dd\x163\xaa\xfa\x84)\xb6\xd4\x0b\xc0\xd8}\xc3\x93\x02\x03\x01\x00\x01\xa3\x82\x01}0\x82\x01y0\x12\x06\x03U\x1d\x13\x01\x01\xff\x04\x080\x06\x01\x01\xff\x02\x01\x000\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x01\x860\x7f\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x04s0q02\x06\x08+\x06\x01\x05\x05\x070\x01\x86&http://isrg.trustid.ocsp.identrust.com0;\x06\x08+\x06\x01\x05\x05\x070\x02\x86/http://apps.identrust.com/roots/dstrootcax3.p7c0\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xc4\xa7\xb1\xa4{,q\xfa\xdb\xe1K\x90u\xff\xc4\x15\x85\x89\x100T\x06\x03U\x1d \x04M0K0\x08\x06\x06g\x81\x0c\x01\x02\x010?\x06\x0b+\x06\x01\x04\x01\x82\xdf\x13\x01\x01\x01000.\x06\x08+\x06\x01\x05\x05\x07\x02\x01\x16"http://cps.root-x1.letsencrypt.org0<\x06\x03U\x1d\x1f\x0450301\xa0/\xa0-\x86+http://crl.identrust.com/DSTROOTCAX3CRL.crl0\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14\xa8Jjc\x04}\xdd\xba\xe6\xd19\xb7\xa6Ee\xef\xf3\xa8\xec\xa10\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00\xdd3\xd7\x11\xf3cX8\xdd\x18\x15\xfb\tU\xbevV\xb9pH\xa5iG’{\xc2$\x08\x92\xf1Z\x1fJ\x12)7$tQ\x1cbh\xb8\xcd\x95pg\xe5\xf7\xa4\xbcN(Q\xcd\x9b\xe8\xae\x87\x9d\xea\xd8\xbaZ\xa1\x01\x9a\xdc\xf0\xddj\x1dj\xd8>W#\x9e\xa6\x1e\x04b\x9a\xff\xd7\x05\xca\xb7\x1f?\xc0\nH\xbc\x94\xb0\xb6eb\xe0\xc1T\xe5\xa3*\xad \xc4\xe9\xe6\xbb\xdc\xc8\xf6\xb5\xc32\xa3\x98\xccw\xa8\xe6ye\x07+\xcb(\xfe:\x16R\x81\xceR\x0c.\x83\xe8\xd5\x063\xfbwl\xce@\xea2\x9e\x1f\x92\A\xc1tl[]\n_3\xccM\x9f\xac8\xf0/{,b\x9d\xd9\xa3\x91o%\x1b/\x90\xb1\x19F=\xf6~\x1b\xa6z\x87\xb9\xa3zm\x18\xfa%\xa5\x91\x87\x15\xe0\xf2\x16/X\xb0\x06/,h&\xc6K\x98\xcd\xda\x9f\x0c\xf9\x7f\x90\xedCJ\x12DNosz(\xea\xa4\xaan{L}\x87\xdd\xe0\xc9\x02D\xa7\x87\xaf\xc34[\xb4B’
2018-02-27 23:04:48,223:DEBUG:acme.client:Received response <Response [200]> (headers: {‘Content-Length’: ‘1174’, ‘Expires’: ‘Tue, 27 Feb 2018 23:04:48 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Tue, 27 Feb 2018 23:04:48 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/pkix-cert’, ‘Replay-Nonce’: ‘KnmzHYuCksitoNM7tAItZHygXMNJeyzx2eCEZ3vY45g’}): ‘0\x82\x04\x920\x82\x03z\xa0\x03\x02\x01\x02\x02\x10\n\x01AB\x00\x00\x01S\x85sj\x0b\x85\xec\xa7\x080\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000?1$0"\x06\x03U\x04\n\x13\x1bDigital Signature Trust Co.1\x170\x15\x06\x03U\x04\x03\x13\x0eDST Root CA X30\x1e\x17\r160317164046Z\x17\r210317164046Z0J1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x160\x14\x06\x03U\x04\n\x13\rLet’s Encrypt1#0!\x06\x03U\x04\x03\x13\x1aLet’s Encrypt Authority X30\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\x9c\xd3\x0c\xf0Z\xe5.G\xb7r]7\x83\xb3hc0\xea\xd75&\x19%\xe1\xbd\xbe5\xf1p\x92/\xb7\xb8KA\x05\xab\xa9\x9e5\x08X\xec\xb1*\xc4h\x87\x0b\xa3\xe3u\xe4\xe6\xf3\xa7bq\xbay\x81\x1f\xd7\x91\x9a\x9f\xf3\xd0xgq\xc8i\x0e\x95\x91\xcf\xfe\xe6\x99\xe9<H\xcc~\xcaMw\x12$\x9dG\x1bZ\xeb\xb9\xec\x1e7\x00\x1c\x9c\xac{\xa7\x05\xea\xceJ\xeb\xbdA\xe56\x98\xb9\xcb\xfdm<\x96h\xdf#B\x90\x0c\x86tg\xc8\x7f\xa5\x9a\xb8Ra\x14\x13?e\xe9\x82\x87\xcb\xdb\xfa\x0eV\xf6\x86\x89\xf3\x85?\x97\x86\xaf\xb0\xdc\x1a\xefk\r\x95\x16}\xc4+\xa0e\xb2\x99\x046u\x80k\xacJ\xf3\x1b\x90Ix/\xa2\x96O %)\x04\xc6t\xc0\xd01\xcd\x8f18\x95\x16\xba\xa83\xb8C\xf1\xb1\x1f\xc30\x7f\xa2y1\x13=-6\xf8\xe3\xfc\xf23j\xb991\xc5\xaf\xc4\x8d\r\x1dd\x163\xaa\xfa\x84)\xb6\xd4\x0b\xc0\xd8}\xc3\x93\x02\x03\x01\x00\x01\xa3\x82\x01}0\x82\x01y0\x12\x06\x03U\x1d\x13\x01\x01\xff\x04\x080\x06\x01\x01\xff\x02\x01\x000\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x01\x860\x7f\x06\x08+\x06\x01\x05\x05\x07\x01\x01\x04s0q02\x06\x08+\x06\x01\x05\x05\x070\x01\x86&http://isrg.trustid.ocsp.identrust.com0;\x06\x08+\x06\x01\x05\x05\x070\x02\x86/http://apps.identrust.com/roots/dstrootcax3.p7c0\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\xc4\xa7\xb1\xa4{,q\xfa\xdb\xe1K\x90u\xff\xc4\x15`\x85\x89\x100T\x06\x03U\x1d \x04M0K0\x08\x06\x06g\x81\x0c\x01\x02\x010?\x06\x0b+\x06\x01\x04\x01\x82\xdf\x13\x01\x01\x01000.\x06\x08+\x06\x01\x05\x05\x07\x02\x01\x16"http://cps.root-x1.letsencrypt.org0<\x06\x03U\x1d\x1f\x0450301\xa0/\xa0-\x86+http://crl.identrust.com/DSTROOTCAX3CRL.crl0\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14\xa8Jjc\x04}\xdd\xba\xe6\xd19\xb7\xa6Ee\xef\xf3\xa8\xec\xa10\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00\xdd3\xd7\x11\xf3cX8\xdd\x18\x15\xfb\tU\xbevV\xb9pH\xa5iG’{\xc2$\x08\x92\xf1Z\x1fJ\x12)7$tQ\x1cbh\xb8\xcd\x95pg\xe5\xf7\xa4\xbcN(Q\xcd\x9b\xe8\xae\x87\x9d\xea\xd8\xbaZ\xa1\x01\x9a\xdc\xf0\xddj\x1dj\xd8>W#\x9e\xa6\x1e\x04b\x9a\xff\xd7\x05\xca\xb7\x1f?\xc0\nH\xbc\x94\xb0\xb6eb\xe0\xc1T\xe5\xa3*\xad \xc4\xe9\xe6\xbb\xdc\xc8\xf6\xb5\xc32\xa3\x98\xccw\xa8\xe6ye\x07+\xcb(\xfe:\x16R\x81\xceR\x0c.\x83\xe8\xd5\x063\xfbwl\xce@\xea2\x9e\x1f\x92\A\xc1tl[]\n_3\xccM\x9f\xac8\xf0/{,b\x9d\xd9\xa3\x91o%\x1b/\x90\xb1\x19F=\xf6~\x1b\xa6z\x87\xb9\xa3zm\x18\xfa%\xa5\x91\x87\x15\xe0\xf2\x16/X\xb0\x06/,h&\xc6K\x98\xcd\xda\x9f\x0c\xf9\x7f\x90\xedCJ\x12DNosz(\xea\xa4\xaan{L}\x87\xdd\xe0\xc9\x02D\xa7\x87\xaf\xc34[\xb4B’
2018-02-27 23:04:48,239:DEBUG:letsencrypt.storage:Writing new private key to /etc/letsencrypt/archive/cloud.factory-tech.com/privkey8.pem.
2018-02-27 23:04:48,240:DEBUG:letsencrypt.storage:Writing certificate to /etc/letsencrypt/archive/cloud.factory-tech.com/cert8.pem.
2018-02-27 23:04:48,240:DEBUG:letsencrypt.storage:Writing chain to /etc/letsencrypt/archive/cloud.factory-tech.com/chain8.pem.
2018-02-27 23:04:48,240:DEBUG:letsencrypt.storage:Writing full chain to /etc/letsencrypt/archive/cloud.factory-tech.com/fullchain8.pem.
2018-02-27 23:04:48,240:DEBUG:letsencrypt.storage:Writing new config /etc/letsencrypt/renewal/cloud.factory-tech.com.conf.new.
2018-02-27 23:04:48,419:DEBUG:letsencrypt.cli:no renewal failures

schoen · February 28, 2018, 1:23am

Thanks. This is a very old version of the Certbot client. @bmw, is it possible that there was a spurious NoInstallationError condition that somehow depends on the environment variables and that was fixed at some time since 0.4.1?

thinkdez · February 28, 2018, 1:27am

To be honest it has never worked I kept manually updating and finally decided to look for help today. I have run updates on the server but I guess I missed the certbot client in the updates… I am not sure. Is there a recommended way to update to a newer version? Do I need to revoke the certificate and reinstall? I am not sure how to proceed here

Thanks for your help

schoen · February 28, 2018, 1:44am

You should be able to get a newer version of Certbot using the PPA

or using the certbot-auto autodownloader script

This might help because there may have been a relevant bug fixed in the meantime. The version of Certbot that you’re currently running was released two years ago Thursday!

mnordhoff · February 28, 2018, 1:48am

That won't be necessary.

bmw · February 28, 2018, 1:56am

@bmw, is it possible that there was a spurious NoInstallationError condition that somehow depends on the environment variables and that was fixed at some time since 0.4.1?

Yes. See NoInstallationError() from Apache plugin within renewal cron jobs due to /usr/sbin not being in the PATH · Issue #1833 · certbot/certbot · GitHub.

thinkdez · February 28, 2018, 1:59am

Alright Thanks everyone. I’ll update certbot. Not sure how I missed that in the process. I guess I did a manual install instead of a package install from repo.

mnordhoff · February 28, 2018, 2:01am

You probably didn't miss anything -- 0.4.1 is the newest version in Ubuntu's offiicial repository. (It was the latest release, or close to it, when Ubuntu 16.04 was released in 2016-04.)

schoen · February 28, 2018, 6:28am

We were having some conversations about this—Ubuntu and Debian are very reluctant to update packages in their repositories for their stable releases, so you can very plausibly get software that’s several years old. For some packages that wouldn’t be a concern, but Certbot has changed quite a lot over that time (including some pretty important bug fixes). So, we’re continuing to talk about what recommendations we want to give packages and end users in this regard.

system · March 30, 2018, 6:28am

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.