I'm trying to renew certs for the domain below. The usual way of certbot renew is failing with bad handshake error. Please see details below. Please advise how should I resolve this. My domain is: https://staging.scanning.questionmark.eu I ran this command: certbot renew It produced this outpu…

Thanks again @rg305 , that was the pointer I needed. For others still struggling, here is how I was able to finally update my certs on my servers. Add the new root certs and intermediate cert. (Links to certs from letsencrypt, in PEM format): ISRG Root X1 ISRG Root X2 Let’s Encrypt R3 Updat…

Hi @raiyankamal welcome to the LE community forum :slight_smile: What version of OpenSSL are you using? When last was ca-certificates updated? Why can't you use a newer version of certbot (or another newer ACME client)?

Thanks for responding @rg305 , specially on a Sunday. Please see my answers below. OpenSSL version. > openssl version OpenSSL 1.0.2k-fips 26 Jan 2017 I don't know when the ca-certificates updated last time. As far as I can tell, we updated SSL certs using certbot on Aug 01, 2021. I have tried to…

[image] raiyankamal: OpenSSL 1.0.2k Please see: Old Let's Encrypt Root Certificate Expiration and OpenSSL 1.0.2 - OpenSSL Blog The currently recommended certificate chain as presented to Let’s Encrypt ACME clients when new certificates are issued contains an intermediate … …

Certbot 0.31.0 renew failed, peer's certificate issuer not recognized

Help

rg305 October 3, 2021, 7:41pm 4

Please see:

[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:645)

Previously working connection to LE now fails- related to recent root cert exp.?

Topic		Replies	Views
Attempting to renew cert: unexpected error: bad handshake Help	11	3084	November 27, 2021
Unable to renew ... bad handshake? [solved] Help	7	4572	June 11, 2018
Certbot auto renewal problem Help	1	1608	November 8, 2021
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed Help	9	15162	October 19, 2021
Certbot renew failed Help	9	2524	December 15, 2021

Certbot 0.31.0 renew failed, peer's certificate issuer not recognized

Related topics