Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
I ran this command: acme.sh --renew-all
It produced this output:
[Thu Aug 12 12:31:52 CDT 2021] Renew: 'wa.newtonpro.com'
[Thu Aug 12 12:31:52 CDT 2021] Sleep 10 and retry.
My web server is (include version): Apache/2.4.10 (Linux/SUSE)
The operating system my web server runs on is (include version):USE Linux Enterprise Server 12 (x86_64)
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know): yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):acme.sh v3.0.1
Here is another attempt:
marcie:~/.acme.sh # ./acme.sh --renew-all
[Thu Aug 12 15:48:28 CDT 2021] Renew: 'wa.newtonpro.com'
[Thu Aug 12 15:48:29 CDT 2021] Sleep 10 and retry.
[Thu Aug 12 15:48:40 CDT 2021] Sleep 10 and retry.
[Thu Aug 12 15:48:52 CDT 2021] Sleep 10 and retry.
6^C
marcie:~/.acme.sh #
It might be enough to change the API endpoint, though I'm not sure how acme.sh will handle the acme account. If the following doesn't work, the best option might be to remove the config file and start fresh - Neilpang has recommended this in the past.
To change the ACME endpoint:
Open /root/.acme.sh/wa.newtonpro.com/wa.newtonpro.com.conf with a text editor and edit the line were it says:
It prints ZeroSSL as default server, which means this is acme.sh 3.0.0+ which is definetly fully v2 compatible. But these old acme.sh configs have had some trouble in the past, lot's of old cruft in there.
marcie:~/.acme.sh # ./acme.sh --renew-all
[Thu Aug 12 17:43:23 CDT 2021] Renew: 'wa.newtonpro.com'
[Thu Aug 12 17:43:41 CDT 2021] Please refer to libcurl - Error Codes for error code: 6
[Thu Aug 12 17:43:43 CDT 2021] Can not init api for: https://acme-v02api.letsencrypt.org/directory.
[Thu Aug 12 17:43:43 CDT 2021] Sleep 10 and retry.
[Thu Aug 12 17:44:11 CDT 2021] Please refer to libcurl - Error Codes for error code: 6
[Thu Aug 12 17:44:13 CDT 2021] Can not init api for: https://acme-v02api.letsencrypt.org/directory.
[Thu Aug 12 17:44:13 CDT 2021] Sleep 10 and retry.
9^C
marcie:~/.acme.sh #
If your certs used to auto-renew in the past (except for the past months), it should work again as before. Your installation was still using ACMEv1, which is now end of life. You're now using ACMEv2, which is still well.
PS: One last thing:
If you want to continue using Let's Encrypt for future new domains, you should run
acme.sh --set-default-ca --server letsencrypt
To continue using Let's Encrypt as the default. This doesn't affect your current certificate though - this will continue to be renewed with Let's Encrypt in any case. This command is just for future certificates for different domains. This is not neccessary though, it entirely depends on your preference.
