Hello, I'm running a webserver apache2 version 2.4.10-10+deb8u12 certbot 0.10.2-1~bpo8+1 OS Debian 8.11 the certificate was renewed without issue but the post script wasn't able to restart apache server which cause a serious outage. Logs show up the following : 2018-12-09 11:04:27,577:ERROR…

Hi @romgo [image] romgo: the certificate was renewed without issue but the post script wasn’t able to restart apache server which cause a serious outage. please share your renew configuration, located /etc/letsencrypt/renewal Perhaps you have used standalone with tls-sni-01 - validation. T…

Hi, Options used in the renewal process [renewalparams] authenticator = standalone post_hook = apachectl -k start account = ***** pre_hook = apachectl -k stop installer = apache Has the renew worked I guess config is right no ?

I think that this type of configuration is known to be a problem . I would suggest changing the authenticator to apache, and removing the hooks: [image] romgo: [renewalparams] authenticator = apache account = ***** installer = apache Then try a certbot renew --dry-run.

[image] romgo: Has the renew worked I guess config is right no ? If you use standalone, Certbot creates a temporary webserver. So you must stop and start your own server -> you have a timeout. So try to switch to apache as authenticator. Or (my preferred version) use webroot.

[image] JuergenAuer: creates Hi, authenticator = apache should not be used in my case : [image] Solution: Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA Help I…

Yes, that the issue certbot temporary webserver didn’t stop on time. The issue here is that certbot try to restart my apache server when is webserver wans’t stoppe successfully. So I guess there is something wrong with standalone mode.

[image] JuergenAuer: Or (my preferred version) use webroot. If you can use webroot, you won't have to stop, nor restart, your apache server.

Certbot failed to restart apache

Help

romgo December 10, 2018, 12:17pm 6

Hi,

authenticator = apache should not be used in my case :

Topic		Replies	Views
Certbot failing to restart Apache after renew Server	14	16478	August 15, 2018
Failed to start Apache2 after renewal Help	5	2684	March 16, 2020
Renewing my Certbot Certificate Help	4	989	August 3, 2020
Apache remains shutdown after renewal Issuance Tech	7	2257	October 4, 2018
Need to stop server to renew? Help	3	360	March 20, 2024

Certbot failed to restart apache

Related topics