My certicate is obsokete

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:enewborn.org

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

2

Yes, your cert has been expired for about a week. Without your answers to the other questions, we don't have enough information to even guess what might be wrong.

5 Likes
3

Here are infos from enewborn.org
My domain is:enewborn.org

I ran this command: https://www.enewborn.org

It produced this output:http://www.enewborn.org (no https)
My web server is (include version):

The operating system my web server runs on is (include version): linux CentOS-7 3.10.0-1160.45.1.el7.x86_64

My hosting provider, if applicable, is:
It is hosted by: DigitalOcean, LLC

I can login to a root shell on my machine (yes or no, or I don't know): no
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
/opt/certbot/lib64/python3.6/site-packages/OpenSSL/_util.py:6: CryptographyDeprecationWarning: Python 3.6 is no longer supported by the Python core team. Therefore, support for it is deprecated in cryptography. The next release of cryptography will remove support for Python 3.6.
from cryptography.hazmat.bindings.openssl.binding import Binding
certbot 1.23.0

4

...has been EOL for almost two years at this point.

The current release of certbot is 5.5.something, so this is also very badly out of date.

But that doesn't explain why your cert wasn't renewed, because it should have happened ~40 days ago. What's the result of certbot renew?

5 Likes
5

Here are infos from enewborn.org certbot renew
/opt/certbot/lib64/python3.6/site-packages/OpenSSL/_util.py:6: CryptographyDeprecationWarning: Python 3.6 is no longer supported by the Python core team. Therefore, support for it is deprecated in cryptography. The next release of cryptography will remove support for Python 3.6.
from cryptography.hazmat.bindings.openssl.binding import Binding
The following error was encountered:
[Errno 13] Permission denied: '/var/log/letsencrypt'
Either run as root, or set --config-dir, --work-dir, and --logs-dir to writeable paths.

6

certbot renew
/opt/certbot/lib64/python3.6/site-packages/OpenSSL/_util.py:6: CryptographyDeprecationWarning: Python 3.6 is no longer supported by the Python core team. Therefore, support for it is deprecated in cryptography. The next release of cryptography will remove support for Python 3.6.
from cryptography.hazmat.bindings.openssl.binding import Binding
The following error was encountered:
[Errno 13] Permission denied: '/var/log/letsencrypt'
Either run as root, or set --config-dir, --work-dir, and --logs-dir to writeable paths.

7

Have you tried running it as root?

5 Likes
8

I can't log as root.
How I set --config-dir, --work-dir, and --logs-dir to writeable paths?

9

Why not? Don't you have control over this server?

5 Likes
10

No.
Only a part of the server which manage many different users.
I can do a sudo command

11

As my certicate SSL is obsolete, can letsencrypt.org give to enewborn a new ssl certificate?

12

That should be enough access.
Try:
sudo certbot renew

4 Likes
13

sudo certbot renew
==>sudo: certbot: command not found
certbot renew
/opt/certbot/lib64/python3.6/site-packages/OpenSSL/_util.py:6: CryptographyDeprecationWarning: Python 3.6 is no longer supported by the Python core team. Therefore, support for it is deprecated in cryptography. The next release of cryptography will remove support for Python 3.6.
from cryptography.hazmat.bindings.openssl.binding import Binding
The following error was encountered:
[Errno 13] Permission denied: '/var/log/letsencrypt'
Either run as root, or set --config-dir, --work-dir, and --logs-dir to writeable paths.

14

It sounds like you need to talk to the person managing that server, or maybe find yourself a new server that is better maintained. Your software is no longer operating correctly, likely because it is outdated due to lack of maintenance.

Your best first option will be talking with the server admin, though.

5 Likes