I received the ACMEv1 deprecation email and need to revisit upgrading my certbot client, reconfiguring an existing working configuration to utilize ACMEv2, and test the operation ( without breakage :-). I am using a GCE instance Debian 4.9.110-3+deb9u6 and certbot --version 0.28.0 after apt-get up…

Editing the config files comes with a warning :slight_smile: Warning Modifying any files in /etc/letsencrypt can damage them so Certbot can no longer properly manage its certificates, and we do not recommend doing so. [image] User Guide — Certbot 1.1.0.dev0 documentation Automatically e…

Looks like it is hitting v2 server. https://acme-staging-v02.api.letsencrypt.org:443 "GET /acme/authz-v3/33098456 HTTP/1.1" 405 103 Received response: HTTP 405 Looks like fullchain.pem (failure) What needs to happen to renew my pem files?

First: Stick with --dry-run until you get it all figured out or you may hit some limits. Second: Provide as much detail on the command line used and the error message received. [see tail of /var/log/letsencrypt/letsencrypt.log file - or wherever the LE log file may reside] [edit] Understand --dr…

OK… root# /usr/bin/certbot --dry-run -v Tons of data: One error shown: Link: https://acme-staging-v02.api.letsencrypt.org/directory ;rel=“index” { “type”: “urn:ietf:params:acme:error:malformed”, “detail”: “Method not allowed”, “status”: 405 } Exiting abnormally: Traceback (most recent call…

Let me invite some to have a look, that may be more familiar with this error: @schoen @_az In the meantime, maybe delete the LE log file (or move it) and create a new one. Then post that new one here (or a link to it).

Thank You.. Here is a post which mentions this and also mentions staging server and dry run. [image] Problem with renew certificates - The request message was malformed :: Method not allowed Help I…

Following that thread, can you post all the package files and their version installed?

You need to upgrade Certbot – or, more precisely, one of its component libraries. I think the current version in stretch-updates works. Are all of your packages up-to-date? What does “dpkg -l python3-acme” show? What does “apt list --upgradeable” show?

[image] mnordhoff: dpkg -l python3-acme ” show root@instance-1:/etc/letsencrypt# apt list --upgradeable Listing... Done linux-image-amd64/oldstable 4.9+80+deb9u9 amd64 [upgradable from: 4.9+80+deb9u6] python-acme/oldstable 0.28.0-1~deb9u1 all [upgradable from: 0.10.2-1] root@instance-1:/e…

[image] mojoa: root@instance-1:/etc/letsencrypt# apt list --upgradeable Listing… Done linux-image-amd64/oldstable 4.9+80+deb9u9 amd64 [upgradable from: 4.9+80+deb9u6] python-acme/oldstable 0.28.0-1~deb9u1 all [upgradable from: 0.10.2-1] So python-acme is definitely out-of-date. But the cur…

Certbot upgrade to support ACMEv2

Help

mojoa January 16, 2020, 4:21am 12

Thank You..

Here is a post which mentions this and also mentions staging server and dry run.

Topic		Replies	Views
ACMEv1 notice after upgrading Certbot Help	13	1081	July 3, 2020
Update your client software to continue using Let's Encrypt Help	9	2760	January 31, 2020
Debian jessie Certbot still using AcmeV1 (CertbotACMEClient/1.3.0)? Help	4	2325	May 15, 2020
Update your client software to continue using Let's Encrypt Help	5	2815	January 21, 2020
Upgrade to ACMEv2 Client Help	3	955	February 25, 2020

Certbot upgrade to support ACMEv2

Related topics