I need help on how to renew Certbot on apache in windows 10 32 bit

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: brigma.com and zonefyradio.com

I ran this command: certbot renew for apache running in xampp server on windows 10

It produced this output: New certificate deployed without reload, fullchain is: C:\Certbot\live\brima.com\fullchain.pem

My web server is (include version): Apache in XAMPP on windows 10

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: me

I can login to a root shell on my machine (yes or no, or I don't know): YES

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): YES

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): Certbot version 1.7.0

After my renewing the certificate, I still receive email telling me that I have 10 days to renew my certificate. Is there any thing else I should do after renewing my certificate the way I did? Also, I tried to replace the old fullchain.pem the key as well but it didn't work!

I ALSO, ENCLOSED THE RENEWAL RESULT BELOW.
...........................................................................................

C:\WINDOWS\system32>certbot renew
Saving debug log to C:\Certbot\log\letsencrypt.log

Processing C:\Certbot\renewal\brigma.com.conf

Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator standalone, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for brigma.com
http-01 challenge for www.brigma.com
http-01 challenge for www.zonefyradio.com
http-01 challenge for zonefyradio.com
Waiting for verification...
Cleaning up challenges

new certificate deployed without reload, fullchain is
C:\Certbot\live\brigma.com\fullchain.pem

Processing C:\Certbot\renewal\zonefyradio.com.conf

Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator standalone, Installer None
Renewing an existing certificate

new certificate deployed without reload, fullchain is
C:\Certbot\live\zonefyradio.com\fullchain.pem

Congratulations, all renewals succeeded. The following certs have been renewed:
C:\Certbot\live\brigma.com\fullchain.pem (success)
C:\Certbot\live\zonefyradio.com\fullchain.pem (success)

Regards,
Ody,

2

Hi @brigma.com,

This message suggests that your renewal worked and that you just need to restart or reload your Apache application in order to make it aware of the new certificate. (This is assuming that you succeeded in pointing your Apache configuration at the version of the certificate under live, at the path mentioned in the output that you quoted. If you made a copy of the certificate elsewhere on the system, or if you instead configured Apache to use the copy under archive, you would need to repeat that process for the new certificate, or else change your Apache configuration to point at the live version of the certificate.)

3

Thanks for quick response... I reloaded apache immediately after the renewal process. Problem is that i am still receiving email that it needs renewal. I wonders if i don't need to worry about it.

Regards,
Ody

4

Well, I think there are two different issues.

First, your site is still unfortunately serving your old certificate instead of your new one. Can you check on how you installed or configured your certificate in your Apache server? You could also run the command certbot certificates to check which certificates you currently have and where they are located on disk.

Second, the renewal e-mail notices are probably not relevant anymore because they're based on whether you renew certificates with exactly the same combination of names as your old certificates. It looks like you might have been through a couple of different combinations and not renewed all of those, but that's OK if you've switched your server over to the new certificate setup. The renewal reminders don't scan or test your site to determine which certificate versions you're actually using or not using.

5

Hi Schoen,

thanks again for being so helpful with this issue. In fact I have just reloaded the certificate fullchain.pem and the privkey.pem with the renewed ones and restarted apache with success. You are also right when I was getting ready with the creation of the Certbot certificate, I ran into problem creating for the both websites at same time although there was success but when I deploys https://www.zonefyradio.com it will call up https://www.brigma.com and with https://zonefyradio.com it will call up https://zonefyradio.com successfully and I am still working on it, to get working correctly. I will keep trying to make it work and when it does I will let you know. Thanks for your time.

Regards,
Ody,

For Brigma.com
And zonefyradio.com

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.