Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
I just tried to renew the certificate for my domain, but experienced several errors that I forgot to log. Because I still couldn't renew the certificate, I tried deleting /etc/letsencrypt/live/datidigital.com, until now I experienced the error above.
Then I run this command: sudo openssl req -nodes -batch -x509 -newkey rsa:2048 -keyout /etc/letsencrypt/self-signed-privkey.pem -out /etc/letsencrypt/self-signed-cert.pem -days 356
Then I edited my nginx config: sudo vim /etc/nginx/sites-available/datidigital.com
when I run the command, use the steps from the link you provided: sudo certbot delete --cert-name datidigital.com
I got an error like this:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certificate(s) are selected for deletion:
* datidigital.com
WARNING: Before continuing, ensure that the listed certificates are not being
used by any installed server software (e.g. Apache, nginx, mail servers).
Deleting a certificate that is still being used will cause the server software
to stop working. See https://certbot.org/deleting-certs for information on
deleting certificates safely.
Are you sure you want to delete the above certificate(s)?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
No certificate found with name datidigital.com (expected /etc/letsencrypt/renewal/datidigital.com.conf).
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
Here is the result from sudo nginx -t before I following the link you provided:
nginx: [emerg] cannot load certificate "/etc/letsencrypt/live/datidigital.com/fullchain.pem": BIO_new_file() failed (SSL: error:80000002:system library::No such file or directory:calling fopen(/etc/letsencrypt/live/datidigital.com/fullchain.pem, r) error:10000080:BIO routines::no such file)
nginx: configuration file /etc/nginx/nginx.conf test failed
And here is the result from sudo nginx -t after I following the link you provided.
nginx: [emerg] invalid number of arguments in "ssl_certificate" directive in /etc/nginx/sites-enabled/datidigital.com:32
nginx: configuration file /etc/nginx/nginx.conf test failed
Search where there are other ssl_certificate pointing to /etc/letsencrypt/live/datidigital.com/fullchain.pem are being used. Apparently this wasn't the only one.
Well, only thing I can say from that nginx error is that nginx thinks there's still a ssl_certificate /etc/letsencrypt/live/datidigital.com/fullchain.pem somewhere
user@vmi1316667:~$ sudo grep -R ssl_certificate /etc/nginx
/etc/nginx/sites-enabled/furniture.datidigital.com: ssl_certificate /etc/letsencrypt/live/furniture.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-enabled/furniture.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/furniture.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-enabled/demov16.datidigital.com:# ssl_certificate /etc/letsencrypt/live/demov16.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-enabled/demov16.datidigital.com:# ssl_certificate_key /etc/letsencrypt/live/demov16.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-enabled/demov16.datidigital.com: #ssl_certificate /etc/letsencrypt/live/datidigital.com/fullchain.pem;
/etc/nginx/sites-enabled/demov16.datidigital.com: #ssl_certificate_key /etc/letsencrypt/live/datidigital.com/privkey.pem;
/etc/nginx/sites-enabled/durrath.datidigital.com: ssl_certificate /etc/letsencrypt/live/durrath.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-enabled/durrath.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/durrath.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-enabled/datidigital.com:# ssl_certificate /etc/letsencrypt/live/datidigital.com/fullchain.pem;
/etc/nginx/sites-enabled/datidigital.com:# ssl_certificate_key /etc/letsencrypt/live/datidigital.com/privkey.pem;
/etc/nginx/sites-enabled/datidigital.com: ssl_certificate /etc/letsencrypt/self-signed-cert.pem;
/etc/nginx/sites-enabled/datidigital.com: ssl_certificate_key /etc/letsencrypt/self-signed-privkey.pem;
/etc/nginx/sites-enabled/trial-abudkebab.datidigital.com: ssl_certificate /etc/letsencrypt/live/trial-abudkebab.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-enabled/trial-abudkebab.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/trial-abudkebab.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-enabled/trial-abudkebab.datidigital.com: #ssl_certificate /etc/letsencrypt/live/demov16-abud-kebab.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-enabled/trial-abudkebab.datidigital.com: #ssl_certificate_key /etc/letsencrypt/live/demov16-abud-kebab.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-enabled/triple-rose.datidigital.com: ssl_certificate /etc/letsencrypt/live/triple-rose.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-enabled/triple-rose.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/triple-rose.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-enabled/ihya-ath-tholibin.site: ssl_certificate /etc/letsencrypt/live/datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-enabled/ihya-ath-tholibin.site: ssl_certificate_key /etc/letsencrypt/live/datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-enabled/v14.datidigital.com: ssl_certificate /etc/letsencrypt/live/v14.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-enabled/v14.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/v14.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-enabled/test-durrath.datidigital.com: ssl_certificate /etc/letsencrypt/live/test-durrath.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-enabled/test-durrath.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/test-durrath.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/furniture.datidigital.com: ssl_certificate /etc/letsencrypt/live/furniture.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/furniture.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/furniture.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/demov16.datidigital.com:# ssl_certificate /etc/letsencrypt/live/demov16.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/demov16.datidigital.com:# ssl_certificate_key /etc/letsencrypt/live/demov16.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/demov16.datidigital.com: #ssl_certificate /etc/letsencrypt/live/datidigital.com/fullchain.pem;
/etc/nginx/sites-available/demov16.datidigital.com: #ssl_certificate_key /etc/letsencrypt/live/datidigital.com/privkey.pem;
/etc/nginx/sites-available/durrath.datidigital.com: ssl_certificate /etc/letsencrypt/live/durrath.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/durrath.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/durrath.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/datidigital.com:# ssl_certificate /etc/letsencrypt/live/datidigital.com/fullchain.pem;
/etc/nginx/sites-available/datidigital.com:# ssl_certificate_key /etc/letsencrypt/live/datidigital.com/privkey.pem;
/etc/nginx/sites-available/datidigital.com: ssl_certificate /etc/letsencrypt/self-signed-cert.pem;
/etc/nginx/sites-available/datidigital.com: ssl_certificate_key /etc/letsencrypt/self-signed-privkey.pem;
/etc/nginx/sites-available/najd-al-dilam.datidigital.com: ssl_certificate /etc/letsencrypt/live/najd-al-dilam.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/najd-al-dilam.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/najd-al-dilam.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/trial-abudkebab.datidigital.com: ssl_certificate /etc/letsencrypt/live/trial-abudkebab.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/trial-abudkebab.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/trial-abudkebab.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/trial-abudkebab.datidigital.com: #ssl_certificate /etc/letsencrypt/live/demov16-abud-kebab.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/trial-abudkebab.datidigital.com: #ssl_certificate_key /etc/letsencrypt/live/demov16-abud-kebab.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/demov16-abud-kebab.datidigital.com: ssl_certificate /etc/letsencrypt/live/demov16-abud-kebab.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/demov16-abud-kebab.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/demov16-abud-kebab.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/triple-rose.datidigital.com: ssl_certificate /etc/letsencrypt/live/triple-rose.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/triple-rose.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/triple-rose.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/ayyubicoffee.datidigital.com: ssl_certificate /etc/letsencrypt/live/ayyubicoffee.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/ayyubicoffee.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/ayyubicoffee.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/dania-al-baraka.datidigital.com: ssl_certificate /etc/letsencrypt/live/dania-al-baraka.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/dania-al-baraka.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/dania-al-baraka.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/ihya-ath-tholibin.site: ssl_certificate /etc/letsencrypt/live/datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/ihya-ath-tholibin.site: ssl_certificate_key /etc/letsencrypt/live/datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/v14.datidigital.com: ssl_certificate /etc/letsencrypt/live/v14.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/v14.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/v14.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/sites-available/test-durrath.datidigital.com: ssl_certificate /etc/letsencrypt/live/test-durrath.datidigital.com/fullchain.pem; # managed by Certbot
/etc/nginx/sites-available/test-durrath.datidigital.com: ssl_certificate_key /etc/letsencrypt/live/test-durrath.datidigital.com/privkey.pem; # managed by Certbot
/etc/nginx/snippets/snakeoil.conf:ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
/etc/nginx/snippets/snakeoil.conf:ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
Sorry if the results are too long because they also contain other domain configurations on my server, but I want to show the original results without snippets so that you can understand them more accurately.
Oh yes, I checked the config for the domain, and I just realized that the domain was using the same certificate as the one I had deleted. After I comment ssl_certificate in the domain config now sudo nginx -t result is successful:
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful