Certificate renewal issue

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: kpscolleges.com

C:\Program Files\Certbot>certbot renew
Saving debug log to C:\Certbot\log\letsencrypt.log

Processing C:\Certbot\renewal\kpscolleges.com.conf

Renewal configuration file C:\Certbot\renewal\kpscolleges.com.conf is broken.
The error was: target C:\Certbot\live\kpscolleges.com\cert1.pem of symlink C:\Certbot\live\kpscolleges.com\cert.pem does not exist
Skipping.

No renewals were attempted.

Additionally, the following renewal configurations were invalid:
C:\Certbot\renewal\kpscolleges.com.conf (parsefail)

0 renew failure(s), 1 parse failure(s)
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile C:\Certbot\log\letsencrypt.log or re-run Certbot with -v for more details.

C:\Program Files\Certbot>

It produced this output:

My web server is (include version): windows server 2022

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

2

The symlink in the Certbot folder looks broken

The EFF has dropped support for Certbot on Windows as of last month (see announcement). Since you just started using it recently you would be better off switching to a new ACME Client. Certify the Web is a good choice (it's Apache deploy link here)

If you are a skilled Apache admin you might also look at using mod_md. It is an ACME Client built in to Apache itself. See the Apache docs about mod_md (here). Or, the docs on the github from where it began shown below. Lots of nice how-to's on github although now that it is built in to Apache you don't have to install it anymore.

3 Likes
3

can you guide me more: i am using xammp/apache .. how i will start i will remove first certificate hen i do..
then create new certificate getting error add primary domain ?

4

Could not verify URL is accessible: http://CN=kpscolleges.com/.well-known/acme-challenge/configcheck

5

I don't think you want the CN= in the above Domain Name.

2 Likes
6

Here is a list ACME Client Implementations - Let's Encrypt including Windows.

2 Likes
7

What shows?:
dir C:\Certbot\live\kpscolleges.com\*

Did the cert files get moved to some other location?

2 Likes
8

08-Mar-24 09:47 PM .
21-Jan-24 06:05 PM ..
08-Mar-24 11:23 PM 1,326 cert.pem

08-Dec-23 10:00 AM 3,749 chain.pem
08-Dec-23 10:00 AM 5,242 fullchain.pem
08-Dec-23 10:00 AM 241 privkey.pem
5 File(s) 10,558 bytes
2 Dir(s) 195,273,834,496 bytes free

10

Everything adds up... Except

  • "5" files. I count only "4".

What shows?:
attrib C:\Certbot\live\kpscolleges.com\*

  • And:

Which your output shows does exist.

2 Likes
11

Why is the date/time for cert.pem so much different than the other pem files? They should have been the same when you got them originally.

2 Likes
12

The attrib command should show us more on that.

2 Likes
13

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.