I have SNAP version of certbot installed with auto renew on ubuntu 22.04 LTS. Due to some issues with systemd / init, i'm running nginx as process, due to this "snap application certbot.renew" have crashed/failed to renew certificates automatically. When running "certbot certonly --force-renew" it…

[image] ebym: certbot 5.5 SNAP version. and certbot 1.21.0 Pick one, and remove the other. [I'd pick the SNAP version]

~$ sudo certbot --version certbot 1.21.0 ~$ sudo certbot renew --dry-run Saving debug log to /var/log/letsencrypt/letsencrypt.log - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Processing /etc/letsencrypt/renewal/<<removed>>-0001.conf - - - - - - - - - - - - - - - …

[image] ebym: sudo certbot --version certbot 1.21.0 [image] ebym: Now that i have uninstalled apt version, what to do Based on the above it looks like you removed the snap version (5.5). Or, do you mean you now also removed v1.21 ? In the end you should be using only the snap version…

[image] ebym: Now that i have uninstalled apt version... [image] ebym: ~$ sudo certbot --version certbot 1.21.0 Did you uninstall that?

Yes, uninstalled the APT version. Only the SNAP Auto-Renew version is there.

Check Host from Server hosted country is working. letsdebug.net still show "ANotWorking". Quick question, would Geo-restricting ingress traffic prevent automatic certificate renewal ?.

[image] ebym: would Geo-restricting ingress traffic prevent automatic certificate renewal ?. Yes, it can. Let's Encrypt checks from (currently) 5 different locations around the world. You are using the --nginx option of Certbot which uses the HTTP Challenge. Can you change your firewall to…

Now after removing geo-restriction, i'm getting "All OK!" from letsdebug.net Now what ?. "snap.certbot.renew.timer" service will trigger in another 2hrs.

[image] MikeMcQ: And this sudo certbot renew --dry-run Try this as test. If works re-run without --dry-run to get cert now or wait 2H and check auto renew works

~$ sudo certbot --version certbot 5.5.0 ~$ sudo certbot renew --dry-run Saving debug log to /var/log/letsencrypt/letsencrypt.log - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - No simulated renewals were attempted. - - - - - - - - - - - - - - - - - - - - - - - - - -…

Expired certs - auto-renew or manual

Help

petercooperjr April 14, 2026, 9:04pm 21

Topic		Replies	Views
Another instance of Certbot is already running Help	32	9282	June 1, 2023
Using port 443 for renewal after TLS-SNI is disabled Help	39	8437	March 13, 2019
Solution: Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA Help	83	274010	March 20, 2018
Upgraded to snap and now have problems Help	6	737	February 9, 2021
Renewal hangs, never times out Help	24	476	April 6, 2025

Expired certs - auto-renew or manual

Related topics