My domain is: martinwurm.photo
I ran this command: certbot --apache
It produced this output:
# certbot --apache
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: martinwurm.photo
2: www.martinwurm.photo
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel):
Cert not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry.
(ref: /etc/letsencrypt/renewal/martinwurm.photo.conf)
What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Attempt to reinstall this existing certificate
2: Renew & replace the cert (limit ~5 per 7 days)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1
Keeping the existing certificate
File:
- Could not be found to be deleted /etc/apache2/sites-available/martinwurm.photo-le-ssl.conf - Certbot probably shut down unexpectedly
An unexpected error occurred:
StopIteration
Please see the logfiles in /var/log/letsencrypt for more details.
IMPORTANT NOTES:
- Unable to install the certificate
- Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/martinwurm.photo/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/martinwurm.photo/privkey.pem
Your cert will expire on 2021-01-01. To obtain a new or tweaked
version of this certificate in the future, simply run certbot again
with the "certonly" option. To non-interactively renew *all* of
your certificates, run "certbot renew"
My web server is (include version): Apache 2.4.38
The operating system my web server runs on is (include version): Debian 10
I can login to a root shell on my machine (yes or no, or I don't know): yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 0.31.0
Background:
I previously had a site set up on the same Apache install and domain and also successfully generated and installed my certificate using Certbot. I then realised that I made a mistake in that site’s VirtualHost file (martinwurm.photo.conf) and, considering that Certbot did some magic generating the TLS-enabled equivalent (martinwurm.photo-le-ssl.conf), decided to delete both of those files, recreate martinwurm.photo.conf, and run Certbot to generate a new martinwurm.photo-le-ssl.conf.
However, this did not work as planned, and Certbot fails to install the certificate ever since, showing the error message visible in the listing above ("Could not be found to be deleted /etc/apache2/sites-available/martinwurm.photo-le-ssl.conf - Certbot probably shut down unexpectedly"). Unfortunately, I do not have a backup of the file Certbot is looking for.
What I tried
Reading the error message, I suspected that Certbot still has a reference to that now deleted file but only wants to delete it, anyway, so I created an empty file called martinwurm.photo-le-ssl.conf. This did not fix the error, however, and Certbot only notified me that "an unexpected error occurred." I also tried renaming martinwurm.photo.conf to something else and loading that site configuration into Apache instead, hoping that it would resolve some kind of naming conflict. However, the outcome was the same.
Unfortunately, I was also unable to find a similar problem on the internet, even though I am sure I can’t be the first one making that mistake. I’m sorry if I missed something there. Any help resolving this issue would be appreciated!
Relevant snippet of /var/log/letsencrypt/letsencrypt.log:
2020-10-03 18:08:03,667:DEBUG:certbot.main:certbot version: 0.31.0
2020-10-03 18:08:03,668:DEBUG:certbot.main:Arguments: ['--apache']
2020-10-03 18:08:03,668:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2020-10-03 18:08:03,683:DEBUG:certbot.log:Root logging level set at 20
2020-10-03 18:08:03,684:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2020-10-03 18:08:03,685:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2020-10-03 18:08:03,810:DEBUG:certbot_apache.configurator:Apache version is 2.4.38
2020-10-03 18:08:04,094:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT
Initialized: <certbot_apache.override_debian.DebianConfigurator object at 0x7fe188643860>
Prep: True
2020-10-03 18:08:04,095:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.override_debian.DebianConfigurator object at 0x7fe188643860> and installer <certbot_apache.override_debian.DebianConfigurator object at 0x7fe188643860>
2020-10-03 18:08:04,095:INFO:certbot.plugins.selection:Plugins selected: Authenticator apache, Installer apache
2020-10-03 18:08:04,100:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/98301579', new_authzr_uri=None, terms_of_service=None), [redacted], Meta(creation_dt=datetime.datetime(2020, 10, 3, 14, 34, 24, tzinfo=<UTC>), creation_host='martinwurm.photography'))>
2020-10-03 18:08:04,101:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2020-10-03 18:08:04,103:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2020-10-03 18:08:04,660:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 658
2020-10-03 18:08:04,661:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Sat, 03 Oct 2020 16:08:04 GMT
Content-Type: application/json
Content-Length: 658
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"F11mJubSeZE": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2020-10-03 18:08:06,300:INFO:certbot.renewal:Cert not yet due for renewal
2020-10-03 18:08:08,249:INFO:certbot.main:Keeping the existing certificate
2020-10-03 18:08:08,250:DEBUG:certbot.reporter:Reporting to user: Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/martinwurm.photo/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/martinwurm.photo/privkey.pem
Your cert will expire on 2021-01-01. To obtain a new or tweaked version of this certificate in the future, simply run certbot again with the "certonly" option. To non-interactively renew *all* of your certificates, run "certbot renew"
2020-10-03 18:08:08,253:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/certbot/client.py", line 516, in deploy_certificate
fullchain_path=fullchain_path)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 334, in deploy_cert
vhosts = self.choose_vhosts(domain)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 358, in choose_vhosts
return [self.choose_vhost(domain, create_if_no_ssl)]
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 540, in choose_vhost
vhost = self.make_vhost_ssl(vhost)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 1116, in make_vhost_ssl
self._copy_create_ssl_vhost_skeleton(nonssl_vhost, ssl_fp)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 1260, in _copy_create_ssl_vhost_skeleton
ssl_vh_contents, sift = self._sift_rewrite_rules(orig_contents)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 1332, in _sift_rewrite_rules
line = next(contents)
StopIteration
2020-10-03 18:08:08,253:DEBUG:certbot.error_handler:Calling registered functions
2020-10-03 18:08:08,253:WARNING:certbot.reverter:File:
- Could not be found to be deleted /etc/apache2/sites-available/martinwurm.photo-le-ssl.conf - Certbot probably shut down unexpectedly
2020-10-03 18:08:08,254:DEBUG:certbot.reporter:Reporting to user: Unable to install the certificate
2020-10-03 18:08:08,255:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 11, in <module>
load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')()
File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main
return config.func(config, plugins)
File "/usr/lib/python3/dist-packages/certbot/main.py", line 1126, in run
_install_cert(config, le_client, domains, new_lineage)
File "/usr/lib/python3/dist-packages/certbot/main.py", line 760, in _install_cert
path_provider.cert_path, path_provider.chain_path, path_provider.fullchain_path)
File "/usr/lib/python3/dist-packages/certbot/client.py", line 516, in deploy_certificate
fullchain_path=fullchain_path)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 334, in deploy_cert
vhosts = self.choose_vhosts(domain)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 358, in choose_vhosts
return [self.choose_vhost(domain, create_if_no_ssl)]
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 540, in choose_vhost
vhost = self.make_vhost_ssl(vhost)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 1116, in make_vhost_ssl
self._copy_create_ssl_vhost_skeleton(nonssl_vhost, ssl_fp)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 1260, in _copy_create_ssl_vhost_skeleton
ssl_vh_contents, sift = self._sift_rewrite_rules(orig_contents)
File "/usr/lib/python3/dist-packages/certbot_apache/configurator.py", line 1332, in _sift_rewrite_rules
line = next(contents)
StopIteration
2020-10-03 18:08:08,255:ERROR:certbot.log:An unexpected error occurred: