Fixing Certbot on Ubuntu with Nginx

[SimBioT]

I faced with this error not the first time:

sudo /var/www/ssl/letsencrypt/./letsencrypt-auto certonly --webroot -w /var/www/ssl -d domain.com

ubuntu 16.04, nginx/1.13.0

[ahaw021]

are you running install as root?

BTW - are you sure you are renewing? The command mentioned is for a new certificate not for a renewal (terms matter)

Andrei

[SimBioT]

Yes, I’m root and I’m renewing my old certificate.

[SimBioT]

After
sudo ./letsencrypt-auto renew
I still getting the same error

[SimBioT]

The same error if I run
sudo ./letsencrypt-auto --help

[ahaw021]

i think you have corrupted your install

I would suggest reinstalling HOWEVER you should take the appropriate steps before doing so

If you are renewing you should use the flag below to avoid corruption errors due to updates.

You should also schedule time to update letsencrypt-auto

More info: https://certbot.eff.org/docs/using.html#webroot

–no-self-upgrade (certbot-auto only) prevent the certbot-auto script
from upgrading itself to newer released versions

Andrei

[SimBioT]

Thanks for your reply!

How do I reinstall this?

I have cloned branch 0.14.x (sudo git clone https://github.com/letsencrypt/letsencrypt -b 0.14.x) but it also does not work

[ahaw021]

hi @SimBioT

I don’t believe the github clone way is the optimal way (in fact its usually discouraged)

have a look at this page which has instructions https://certbot.eff.org/all-instructions/#ubuntu-16-04-xenial-nginx

Andrei

[SimBioT]

I installed certbot but after command
sudo certbot --nginx certonly

After I choose my domain I’m getting an error:

tls-sni-01 challenge for domain.com
nginx: [alert] kill(7078, 1) failed (3: No such process)
Cleaning up challenges
nginx: [alert] kill(7078, 1) failed (3: No such process)
Encountered exception during recovery
nginx restart failed:

Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/certbot/error_handler.py", line 99, in _call_registered
    self.funcs[-1]()
  File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 284, in _cleanup_challenges
    self.auth.cleanup(achalls)
  File "/usr/lib/python2.7/dist-packages/certbot_nginx/configurator.py", line 826, in cleanup
    self.restart()
  File "/usr/lib/python2.7/dist-packages/certbot_nginx/configurator.py", line 592, in restart
nginx_restart(self.conf('ctl'), self.nginx_conf)
   File "/usr/lib/python2.7/dist-packages/certbot_nginx/configurator.py", line 855, in nginx_restart
    "nginx restart failed:\n%s\n%s" % (out.read(), err.read()))
    MisconfigurationError: nginx restart failed:


nginx restart failed:

[SimBioT]

If I run
sudo certbot renew --dry-run

renewal config file {} is missing a required file reference
Renewal configuration file /etc/letsencrypt/renewal/domain.com.conf is broken. Skipping

[SimBioT]

Oh NVM

I got it with
sudo certbot certonly --no-self-upgrade -d domain.com

Thanks a lot!