Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: setpad.ca
I ran this command: sudo certbot renew --dry-run
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Processing /etc/letsencrypt/renewal/setpad.ca-0002.conf
Cert is due for renewal, auto-renewing...
Could not choose appropriate plugin: The manual plugin is not working; there may be problems with your existing configuration.
The error was: PluginError('An authentication script must be provided with --manual-auth-hook when using the manual plugin non-interactively.',)
Attempting to renew cert (setpad.ca-0002) from /etc/letsencrypt/renewal/setpad.ca-0002.conf produced an unexpected error: The manual plugin is not working; there may be problems with your existing configuration.
The error was: PluginError('An authentication script must be provided with --manual-auth-hook when using the manual plugin non-interactively.',). Skipping.
Processing /etc/letsencrypt/renewal/setpad.ca-0001.conf
Cert not due for renewal, but simulating renewal for dry run
Plugins selected: Authenticator nginx, Installer nginx
Renewing an existing certificate
Attempting to renew cert (setpad.ca-0001) from /etc/letsencrypt/renewal/setpad.ca-0001.conf produced an unexpected error: urn:ietf:params:acme:error:malformed :: The request message was malformed :: Method not allowed. Skipping.
Processing /etc/letsencrypt/renewal/clone1.setpad.ca.conf
Cert not due for renewal, but simulating renewal for dry run
Plugins selected: Authenticator nginx, Installer nginx
Renewing an existing certificate
Attempting to renew cert (clone1.setpad.ca) from /etc/letsencrypt/renewal/clone1.setpad.ca.conf produced an unexpected error: urn:ietf:params:acme:error:malformed :: The request message was malformed :: Method not allowed. Skipping.
Processing /etc/letsencrypt/renewal/setpad.ca.conf
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/certbot/renewal.py", line 64, in _reconstitute
renewal_candidate = storage.RenewableCert(full_path, config)
File "/usr/lib/python3/dist-packages/certbot/storage.py", line 460, in init
self._check_symlinks()
File "/usr/lib/python3/dist-packages/certbot/storage.py", line 519, in _check_symlinks
"expected {0} to be a symlink".format(link))
certbot.errors.CertStorageError: expected /etc/letsencrypt/live/setpad.ca/cert.pem to be a symlink
Renewal configuration file /etc/letsencrypt/renewal/setpad.ca.conf is broken. Skipping.
Processing /etc/letsencrypt/renewal/www.setpad.ca.conf
Cert not due for renewal, but simulating renewal for dry run
Plugins selected: Authenticator nginx, Installer nginx
Renewing an existing certificate
Attempting to renew cert (www.setpad.ca) from /etc/letsencrypt/renewal/www.setpad.ca.conf produced an unexpected error: urn:ietf:params:acme:error:malformed :: The request message was malformed :: Method not allowed. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/setpad.ca-0002/fullchain.pem (failure)
/etc/letsencrypt/live/setpad.ca-0001/fullchain.pem (failure)
/etc/letsencrypt/live/clone1.setpad.ca/fullchain.pem (failure)
/etc/letsencrypt/live/www.setpad.ca/fullchain.pem (failure)
** DRY RUN: simulating 'certbot renew' close to cert expiry
** (The test certificates below have not been saved.)
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/setpad.ca-0002/fullchain.pem (failure)
/etc/letsencrypt/live/setpad.ca-0001/fullchain.pem (failure)
/etc/letsencrypt/live/clone1.setpad.ca/fullchain.pem (failure)
/etc/letsencrypt/live/www.setpad.ca/fullchain.pem (failure)
Additionally, the following renewal configurations were invalid:
/etc/letsencrypt/renewal/setpad.ca.conf (parsefail)
** DRY RUN: simulating 'certbot renew' close to cert expiry
** (The test certificates above have not been saved.)
4 renew failure(s), 1 parse failure(s)
My web server is (include version): nginx 1.10.3
The operating system my web server runs on is (include version): Debian 9.6 (stretch)
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know): yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 0.28.0
======
Hi. Yesterday received an notification saying my certificates would expire in 20 days.
When I installed Letsencrypt last year, the process was so easy and seamless that I didn't bother taking notes, and so now I am clueless as to what I need to do.
Thanks for your help
]
]