certbot.errors.Error: fullchain does not match cert + chain for mail.texrio.ru!

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: mail.texrio.ru

I ran this command: certbot certificates

It produced this output: Renewal configuration file /etc/letsencrypt/renewal/mail.texrio.ru.conf produced an unexpected error: fullchain does not match cert + chain for mail.texrio.ru!. Skipping.

My web server is (include version): nginx version: nginx/1.14.0 (Ubuntu)

The operating system my web server runs on is (include version): Ubuntu 18.04.2 LTS

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.27.0

Help, please :slight_smile:

2

Hi @moskit

then share the content of these three files.

Make a backup.

If cert + chain are not empty and if both have a correct certificate, merge both files in one - the fullchain.

PS: cert.pem -> copy it to a Windows system, add .crt, then you can open it and see the content. Same with chain.pem.

3

root@mail:/etc/letsencrypt/archive/mail.texrio.ru# cat cert1.pem
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISA74q+e0SdGMTxyyNFPA/2s7TMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTkxMjM2NDFaFw0y
MDA1MTkxMjM2NDFaMBkxFzAVBgNVBAMTDm1haWwudGV4cmlvLnJ1MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW4F9UP7ToVrEt7OcD1dU3f7WRpRQPSV
ExLBYEiV+xAocF8icvNoJ88X7VFasfV+eLTMFeZx8T8NPhP8XzA/NHH5deMbCifh
44Pdo/82erLiOY5BXg11ZVgPlZx4pnXxjakljVWPMvZWAu8esbWyuWSBI8M+KHhW
tMpcRYlgUYqdbu14SmJ8BdbDCq18RUfTfJY6cIv52fcVG013QA3SnzwQbyljAT03
67XMPlyzJx9Kak8l1ts/osS0DM50P8iti9uyuLFeHSu3tRjNzbyWpoI7QIbrehuc
FBbyPFMF1KniUh9Y916rd8s009db8mtz5qv7eksWWJRVMiVMj8/HuwIDAQABo4IC
YjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQkFEQHp2cnCoKyISvEovu4e62T
aTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMBkGA1UdEQQSMBCCDm1haWwudGV4cmlvLnJ1MEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAXqdz+d9WwOe1
Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwXao2/wAABAMARzBFAiBgFenYAzEU
CL+JXn9SWyHz97b72HluEKJzqnUK+N7F6AIhAMvwFtV/648Hi4niXkLguZhhjMiw
QlEj/zCIxeyF9kO+AHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A
AAFwXao29wAABAMARjBEAiByFo8Icinsc4zDIGxzwoqLZC2Rxk623Hxl/YaJ1ogp
0AIgN07xUoUf1oqMt9LSXn++KkbO8aRyuj4eI1oeIUP51SAwDQYJKoZIhvcNAQEL
BQADggEBAHgdLjtsyzey54VzK+V+w46ffz2uMJH9hlYNcZ7V8Fig/aZf3mAaxFSA
usvJACAMQ3TRLu67x0PN4bHxRPSjd0MimWyRIXs66KhfWp+RcTdFYaBRwytwgJmQ
d5tIMr3i8sOD3hUUD62qCjbRCO8W2UvdYg/Y6bhL7e3CvKGDGAtXBieanLngguq6
T43SnX1hEsMLqen1DxXo1hUWP1h8z+zZ4TVEWSodnL1wE1IPXm0qnHWVNdfRIhJY
O5NdDGKX/fCUYghG1OWXWxr0/Q0qTG2sWwIlk+zc6IQxgC1mw9dZWohObjPox8EG
NOd9odhHZ6BUF6i9UDtB2F6KWARqkZg=
-----END CERTIFICATE-----

root@mail:/etc/letsencrypt/archive/mail.texrio.ru# cat chain1.pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

root@mail:/etc/letsencrypt/archive/mail.texrio.ru# cat /etc/letsencrypt/renewal/mail.texrio.ru.conf

renew_before_expiry = 30 days

version = 0.27.0
archive_dir = /etc/letsencrypt/archive/mail.texrio.ru
cert = /etc/letsencrypt/live/mail.texrio.ru/cert.pem
privkey = /etc/letsencrypt/live/mail.texrio.ru/privkey.pem
chain = /etc/letsencrypt/live/mail.texrio.ru/chain.pem
fullchain = /etc/letsencrypt/live/mail.texrio.ru/fullchain.pem

Options used in the renewal process

[renewalparams]
account = edee9f22f2df9233b39d846412b2eaf4
authenticator = webroot
#webroot_path = /opt/www/roundcubemail,
server = https://acme-v02.api.letsencrypt.org/directory
[[webroot_map]]
mail.texrio.ru = /opt/www/roundcubemail

root@mail:/etc/letsencrypt/archive/mail.texrio.ru# ll /etc/letsencrypt/live/mail.texrio.ru/
total 6
drwxr-xr-x 2 root root 7 Feb 19 16:36 ./
drwx------ 3 root root 3 Feb 19 16:36 ../
-rw-r--r-- 1 root root 682 Feb 19 16:36 README
lrwxrwxrwx 1 root root 38 Feb 19 16:36 cert.pem -> ../../archive/mail.texrio.ru/cert1.pem
lrwxrwxrwx 1 root root 39 Feb 19 16:36 chain.pem -> ../../archive/mail.texrio.ru/chain1.pem
lrwxrwxrwx 1 root root 43 Feb 19 16:36 fullchain.pem -> ../../archive/mail.texrio.ru/fullchain1.pem
lrwxrwxrwx 1 root root 41 Feb 19 16:36 privkey.pem -> ../../archive/mail.texrio.ru/privkey1.pem

4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.