Expired SSL Certificate Renewal Issue

[stripedsweater]

@_az

Edit: on second thought, it’s even more likely that you are using a CDN like Cloudflare. Is that the case? If you’re using Cloudflare, you need to tell lego not to use the TLS-ALPN challenge but use the DNS or HTTP challenge instead. TLS-ALPN is incompatible with CDNs like Cloudflare.

IT WORKED, I LOVE YOU! THANK YOU SO MUCH!!!

For anyone else using Cloudflare as a CDN going through a similar situation in the future here are the steps to fixing this problem.

@_az

use the DNS or HTTP challenge instead. TLS-ALPN is incompatible with CDNs like Cloudflare.

2. Check the Lego Documentation to find your DNS Provider. In this case I am using Cloudflare as a CDN so I chose Cloudflare, although they did not provide me with my domain name.
   b) follow the Lego Docs to create a Cloudflare API Key or Token.

a) Follow the Lego Documentation and cross reference it with the bitnami ssl docs.

(The following method works with both AWS or Google Cloud as long as your using an apache server with a similar deployment. There are also nginx directions in the bitnami ssl docs for those who are interested.)

Follow the ALTERNATIVE APPROACH in the bitnami ssl docs

b) Substitute/Combine

sudo /opt/bitnami/letsencrypt/lego --tls --email="EMAIL-ADDRESS" --domains="DOMAIN" --domains="www.DOMAIN" --path="/opt/bitnami/letsencrypt" run

from the bitnami ssl docs with the code found in the lego documentation for your dns in my case it was the following

CLOUDFLARE_DNS_API_TOKEN=1234567890abcdefghijklmnopqrstuvwxyz \
lego --dns cloudflare --domains my.domain.com --email my@email.com run

then it turned into this

CLOUDFLARE_DNS_API_TOKEN=1234567890abcdefghijklmnopqrstuvwxyz \
lego --dns cloudflare --domains my.domain.com --email my@email.com --path="/opt/bitnami/letsencrypt" run

4. If you received the following message

[INFO] [domainname] acme: Validations succeeded; requesting certificates
[INFO] [domainname] Server responded with a certificate.

Follow the rest of the steps in the bitnami ssl docs in my case it was this:

sudo mv /opt/bitnami/apache2/conf/server.crt /opt/bitnami/apache2/conf/server.crt.old
sudo mv /opt/bitnami/apache2/conf/server.key /opt/bitnami/apache2/conf/server.key.old
sudo mv /opt/bitnami/apache2/conf/server.csr /opt/bitnami/apache2/conf/server.csr.old
sudo ln -sf /opt/bitnami/letsencrypt/certificates/DOMAIN.key /opt/bitnami/apache2/conf/server.key
sudo ln -sf /opt/bitnami/letsencrypt/certificates/DOMAIN.crt /opt/bitnami/apache2/conf/server.crt
sudo chown root:root /opt/bitnami/apache2/conf/server*
sudo chmod 600 /opt/bitnami/apache2/conf/server*

Then I restarted the server

sudo /opt/bitnami/ctlscript.sh restart apache

The end.

https://media1.giphy.com/media/xSM46ernAUN3y/giphy.gif(image larger than 4 MB)