Cannot renew: domain.conf is broken/invalid

Help
1

My domain is: www.eurotechauto.co.nz

I ran this command: sudo certbot renew --dry-run

It produced this output:
note that there were several domains. I have trimmed to show only one

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Processing /etc/letsencrypt/renewal/www.eurotechauto.co.nz.conf

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/certbot/renewal.py”, line 67, in _reconstitute
renewal_candidate = storage.RenewableCert(full_path, config)
File “/usr/lib/python3/dist-packages/certbot/storage.py”, line 444, in init
“file reference”.format(self.configfile))
certbot.errors.CertStorageError: renewal config file {‘version’: ‘0.31.0’, ‘archive_dir’: ‘/etc/letsencrypt/archive/www.eurotechauto.co.nz’, ‘cert-path’: ‘/etc/letsencrypt/live/www.eurotechauto.co.nz/cert.pem’, ‘privkey’: ‘/etc/letsencrypt/live/www.eurotechauto.co.nz/privkey.pem’, ‘chain’: ‘/etc/letsencrypt/live/www.eurotechauto.co.nz/chain.pem’, ‘fullchain’: ‘/etc/letsencrypt/live/www.eurotechauto.co.nz/fullchain.pem’, ‘renewalparams’: {‘account’: ‘6ac2cccec2a0246f1f989176f9199952’, ‘authenticator’: ‘webroot’, ‘server’: ‘https://acme-v02.api.letsencrypt.org/directory’, ‘webroot_map’: {‘eurotechauto.co.nz’: ‘/var/www/eurotechauto.co.nz’, ‘www.eurotechauto.co.nz’: ‘/var/www/eurotechauto.co.nz’}}} is missing a required file reference
Renewal configuration file /etc/letsencrypt/renewal/www.eurotechauto.co.nz.conf is broken. Skipping.

** DRY RUN: simulating ‘certbot renew’ close to cert expiry
** (The test certificates below have not been saved.)

My web server is (include version): nginx version: nginx/1.14.0 (Ubuntu)

The operating system my web server runs on is (include version): Ubuntu 18.04.4 LTS

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.31.0

2

Please show this file:

3 
# renew_before_expiry = 30 days
version = 0.31.0
archive_dir = /etc/letsencrypt/archive/www.eurotechauto.co.nz
cert-path = /etc/letsencrypt/live/www.eurotechauto.co.nz/cert.pem
privkey = /etc/letsencrypt/live/www.eurotechauto.co.nz/privkey.pem
chain = /etc/letsencrypt/live/www.eurotechauto.co.nz/chain.pem
fullchain = /etc/letsencrypt/live/www.eurotechauto.co.nz/fullchain.pem

# Options used in the renewal process
[renewalparams]
account = 6ac2cccec2a0246f1f989176f9199952
authenticator = webroot
server = https://acme-v02.api.letsencrypt.org/directory
[[webroot_map]]
eurotechauto.co.nz = /var/www/eurotechauto.co.nz
www.eurotechauto.co.nz = /var/www/eurotechauto.co.nz
4

Does that path still exist?

5

Yes. /var/www/eurotechauto.co.nz is a valid path

6

What says?:
sudo apt update
sudo apt list --upgradable

7 
1 package can be upgraded. Run 'apt list --upgradable' to see it.
$ apt list --upgradable
Listing... Done
netplan.io/bionic-updates 0.99-0ubuntu3~18.04.3 amd64 [upgradable from: 0.97-0ubuntu1~18.04.1]
N: There are 3 additional versions. Please use the '-a' switch to see them.
8

Did you run this first?:
sudo apt update

9

I did do that first. It was just that I clipped the output and missed it.

10

hmm…

Try reinstalling certbot from the instructions found at:

1 Like
11

OK. Will do.

I’ll have to report back tomorrow as I have to run now. Thanks for your suggestions.

2 Likes
12

I followed the snapd instructions and everything seems to be working.

thanks

2 Likes
13

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.