Certbot SSL Renewal - same expiration date

AVD · January 26, 2023, 9:19am

The config file doesn't have fullchain4.pem in the file. You are asking for the fullchain4.pem. Does that matter?

rg305 · January 26, 2023, 9:19am

Edit the file:
vi /etc/letsencrypt/archive/mail.allanimals.info/chain4.pem
OR
nano /etc/letsencrypt/archive/mail.allanimals.info/chain4.pem

And replace the contents with the last two certs you just posted.

rg305 · January 26, 2023, 9:21am

I repeat myself:

But to answer your question:

rg305:

I see a problem we missed before:

AVD:

-rw------- 1 root root 1704 Oct 29 18:03 privkey4.pem
-rw-r--r-- 1 root root 5607 Oct 29 18:03 fullchain4.pem
-rw-r--r-- 1 root root 5688 Oct 30 13:16 chain4.pem
-rw-r--r-- 1 root root 1858 Oct 29 18:03 cert4.pem

That chain is from the following day!

The chain4.pem is the broken file.
It is referenced by the common name in the /live/ folder (as "chain.pem").

[if you open that renewal.conf file you will see]

AVD · January 26, 2023, 9:25am

File modified as requested. I am asking additional questions so I understand the concept and process.

rg305 · January 26, 2023, 9:27am

You can go back and review all the steps - they will be here.

Now we need to rerun:
certbot certificates
And see if that clears half the problem.
If so, then redo the same thing for the -0001 folder fullhain1.pem/chain1.pem files.

AVD · January 26, 2023, 9:29am

certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Renewal configuration file /etc/letsencrypt/renewal/mail.allanimals.info-0001.conf produced an unexpected error: fullchain does not match cert + chain for mail.allanimals.info-0001!. Skipping.

Found the following certs:
Certificate Name: mail.allanimals.info
Serial Number: 4a2c7776491b90169172143c6bd095db22e
Key Type: RSA
Domains: mail.allanimals.info
Expiry Date: 2023-01-27 17:03:16+00:00 (VALID: 1 day)
Certificate Path: /etc/letsencrypt/live/mail.allanimals.info/fullchain.pem
Private Key Path: /etc/letsencrypt/live/mail.allanimals.info/privkey.pem

The following renewal configurations were invalid:
/etc/letsencrypt/renewal/mail.allanimals.info-0001.conf

rg305 · January 26, 2023, 9:30am

That actually fixed that part of the problem.
This other part seems a bit different.

AVD · January 26, 2023, 9:31am

Getting the file info...

rg305 · January 26, 2023, 9:31am

Wait!
This one looks right:

AVD:

ls -lr /etc/letsencrypt/archive/*
/etc/letsencrypt/archive/mail.allanimals.info-0001:
total 16
-rw------- 1 root root 1704 Oct 30 14:28 privkey1.pem
-rw-r--r-- 1 root root 3684 Oct 30 14:28 fullchain1.pem
-rw-r--r-- 1 root root 3765 Oct 30 14:48 chain1.pem
-rw-r--r-- 1 root root 1858 Oct 30 14:28 cert1.pem

We need to look into the renewal conf files!!!!!!!
cat /etc/letsencrypt/renewal/mail.allanimals.info.conf
cat /etc/letsencrypt/renewal/mail.allanimals.info-0001.conf

[reordered post for later reading chronologically]

AVD · January 26, 2023, 9:32am

cat /etc/letsencrypt/renewal/mail.allanimals.info.conf

renew_before_expiry = 30 days

version = 1.32.2
archive_dir = /etc/letsencrypt/archive/mail.allanimals.info
cert = /etc/letsencrypt/live/mail.allanimals.info/cert.pem
privkey = /etc/letsencrypt/live/mail.allanimals.info/privkey.pem
chain = /etc/letsencrypt/live/mail.allanimals.info/chain.pem
fullchain = /etc/letsencrypt/live/mail.allanimals.info/fullchain.pem

Options used in the renewal process

[renewalparams]
account = 994651a718b257d6f21dd3959b6cc9d6
authenticator = standalone
server = https://acme-v02.api.letsencrypt.org/directory
key_type = rsa
preferred_chain = ISRG Root X1

cat /etc/letsencrypt/renewal/mail.allanimals.info-0001.conf

renew_before_expiry = 30 days

version = 1.31.0
archive_dir = /etc/letsencrypt/archive/mail.allanimals.info-0001
cert = /etc/letsencrypt/live/mail.allanimals.info-0001/cert.pem
privkey = /etc/letsencrypt/live/mail.allanimals.info-0001/privkey.pem
chain = /etc/letsencrypt/live/mail.allanimals.info-0001/chain.pem
fullchain = /etc/letsencrypt/live/mail.allanimals.info-0001/fullchain.pem

Options used in the renewal process

[renewalparams]
account = 994651a718b257d6f21dd3959b6cc9d6
preferred_chain = ISRG Root X1
authenticator = standalone
server = https://acme-v02.api.letsencrypt.org/directory
key_type = rsa
root@mail:/etc/letsencrypt/live/mail.allanimals.info-0001#

rg305 · January 26, 2023, 9:33am

Man, both look right.

Let's go with the same edit that worked on the other folder.

rg305 · January 26, 2023, 9:36am

Sorry, I missed that post altogether.
It will never show any number there.
The number is only updated in the symlink - which NEVER changes.
You will always find the latest file (number) at the /live/ folder [without numbers].

AVD · January 26, 2023, 9:37am

To clarify:

Take these:

cert = /etc/letsencrypt/live/mail.allanimals.info-0001/cert.pem
chain = /etc/letsencrypt/live/mail.allanimals.info-0001/chain.pem

and put them both into:

/etc/letsencrypt/renewal/mail.allanimals.info-0001/fullchain.pem

Is that correct?

rg305 · January 26, 2023, 9:38am

cat /etc/letsencrypt/archive/mail.allanimals.info-0001/fullchain1.pem

Edit the file:
vi /etc/letsencrypt/archive/mail.allanimals.info-0001/chain1.pem
OR
nano /etc/letsencrypt/archive/mail.allanimals.info-0001/chain1.pem

And replace the contents with the last two certs from the fullchain1.pem file.

rg305 · January 26, 2023, 9:40am

Not sure... let me check which it the broken file???
[chain OR fullchain]

rg305 · January 26, 2023, 9:42am

Impossible to tell from the timestamps which one is off.

We need to see all three [NOT the PRIVKEY file - never post those].
cat /etc/letsencrypt/archive/mail.allanimals.info-0001/cert1.pem
cat /etc/letsencrypt/archive/mail.allanimals.info-0001/chain1.pem
cat /etc/letsencrypt/archive/mail.allanimals.info-0001/fullchain1.pem

The sizes are off:
1858+3765 is way bigger than 3684 [which is smaller than the chain1.pem]

AVD · January 26, 2023, 9:45am

cat /etc/letsencrypt/archive/mail.allanimals.info-0001/cert1.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

cat /etc/letsencrypt/archive/mail.allanimals.info-0001/chain1.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

cat /etc/letsencrypt/archive/mail.allanimals.info-0001/fullchain1.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

orangepizza · January 26, 2023, 9:46am

wow certbot really need --reset-hard option

rg305 · January 26, 2023, 9:47am

OK the cert looks fine.
The chain has two entries.
The fullchain has the cert but only one entry.
Go ahead and add the last cert from the chain to the fullchain [at the end].
That should set things right.

rg305 · January 26, 2023, 9:49am

Yeah, this was way beyond update_symlinks LOL

Topic		Replies	Views
Error renewing SSL Help	59	5887	January 31, 2021
Renewal done, but still expired Help	26	11036	December 15, 2018
Cert renewal not updating to new expiry date Help	51	3189	October 9, 2020
Noob struggling with renewing Help	13	827	November 17, 2020
Certificate gets renewed but still shows expired in the site Help	34	4445	August 23, 2022

Certbot SSL Renewal - same expiration date

renew_before_expiry = 30 days

Options used in the renewal process

renew_before_expiry = 30 days

Options used in the renewal process

Related topics