Hello, Usually i just restart Apache within the 30 days of expiry to get a a new 90 day cert but not this time. The new Cert will not generate and i assume its because of the ‘DST Root CA X3? What are my options to get a new cert? Please fill out the fields below so we can help you better. Note:…

[image] nash: Certbot 0.17.0 How does that still even work? [image] nash: What are my options to get a new cert? I would start with updating the client. [if you can't also update the Ubuntu 14]

Do you have the latest LE logs available? [maybe there is a clue there that can help us get to the bottom of this quicker]

[image] nash: The new Cert will not generate and i assume its because of the ‘DST Root CA X3? That's almost certain an incorrect assumption. Recently there was a change in intermediate signing certificate, but nothing has been changed with regard to the default chain to the root certificate.

[image] Osiris: That's almost certain an incorrect assumption. Recently there was a change in intermediate signing certificate, but nothing has been changed with regard to the default chain to the root certificate. Recently there was a change ??

[image] nash: The operating system my web server runs on is (include version): Ubuntu 14.04.5 LTS Unless you're paying Canonical via an ESM contract, that operating system fell out of official support about a year ago Ubuntu release cycle | Ubuntu Overview of the Ubuntu release …

I understand your point and I do feel the same way as you about using such outdated software. But I can't help reading contradiction in the statements as described in your post: [image] schoen: Unless you're paying Canonical via an ESM contract, that operating system fell out of official suppo…

If you pay Canonical for ESM support, you should be able to get Canonical to give you updated packages for Certbot, just as you should be able to get updated packages for anything else you rely on that Canonical had previously packaged in that distribution, depending on the scope of the ESM contract…

Then (if anyone/anywhere is paying them) would that mean that Certbot developers are still supporting it?

No, the Canonical developers would have to take care of that by making their own updated packages.

Certbot 0.17.0 Trying to renew Cert

Help

Osiris December 10, 2020, 2:33pm 6

Yes.

Topic		Replies	Views
Certbot fails to renew a certificate that has expired a few hours before Help	10	4137	December 6, 2021
SSL Error when i hit certbot --apache Help	13	2729	October 7, 2021
Cert Renewal Fails Help	5	2848	October 30, 2021
Renewing SSL certificate issues with an old CA Root X3 Help	6	1200	September 16, 2021
Previously working connection to LE now fails- related to recent root cert exp.? Help	50	2829	October 11, 2021

Certbot 0.17.0 Trying to renew Cert

Related topics