Cannot load certificate "/etc/ssl/private/": PEM_read_bio_X509_AUX() failed (SSL: error:0480006C:PEM routines::no start line:Expecting: TRUSTED CERTIFICATE)

rg305 · August 30, 2023, 4:23am

What about?...
~~acmephp/core 1.3.0~~

webprofusion · August 30, 2023, 4:25am

Yeah I don't know how acme-nginx works but I'd guess that what's actually happening is your http request is being forwarded to your server on port 8000 via the proxy_pass config.

Looking at their code it's supposed to write a temporary rule to your config:

github.com

kshcherban/acme-nginx/blob/master/acme_nginx/Acme.py#L121


      
                  process = subprocess.Popen(
                      "nginx -s reload".split(), stdout=subprocess.PIPE, stderr=subprocess.PIPE
                  )
                  process_out = process.communicate()
                  self.log.debug(process_out[0])
                  self.log.debug(process_out[1])
                  if process.returncode > 0:
                      self.log.error("failed to reload nginx")
                      self.log.error(process_out[1])
          
              def _write_vhost(self):
                  """Write virtual host configuration for http"""
                  challenge_file = tempfile.mkdtemp()
                  self.log.info("created challenge file into {0}".format(challenge_file))
                  os.chmod(challenge_file, 0o777)
                  vhost_data = """
          server {{
              listen 80;
              listen [::]:80;
              server_name {domain};
              location /.well-known/acme-challenge/ {{

You might need to create an issue on their github to ask more questions if you need their client to work.

rg305 · August 30, 2023, 4:26am

Can you install snap?
Installing snapd | Snapcraft documentation

webprofusion · August 30, 2023, 4:27am

acme.sh is a bash script you download, not a package you install. GitHub - acmesh-official/acme.sh: A pure Unix shell script implementing ACME client protocol

froggyten · August 30, 2023, 4:31am

@webprofusion @rg305 Also sorry Rudy, I've been saying "Ryan"..
I've found this post:

and was able to install certbot.
Thank you very much gentlemen for your help. Have a great weekend.

EDIT:
This link provides the exact steps to install certbot and allow it to generate a certificate automatically.

rg305 · August 30, 2023, 5:36am

Glad to hear that you found this solution
Looking forward to that autorenewal

system · September 29, 2023, 5:37am

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Certbot failing in AWS Elastic Beanstalk ngix extension Help	17	3523	June 26, 2019
Cannot install certbot on RHEL; Broken Packages Help	10	4488	October 4, 2019
Failed Authentication Help	12	4088	August 1, 2019
Let' Encrypt : The client lacks sufficient authorization Help	53	3334	October 23, 2020
Certbot not working (anymore) on centos7 with nginx Help	29	3974	September 26, 2017

Cannot load certificate "/etc/ssl/private/": PEM_read_bio_X509_AUX() failed (SSL: error:0480006C:PEM routines::no start line:Expecting: TRUSTED CERTIFICATE)

Related topics