# Openresty lua fails to renew / re-issue

**URL:** <https://community.letsencrypt.org/t/openresty-lua-fails-to-renew-re-issue/104902>\
**Category:** Help\
**Created:** [October 26, 2019, 11:30am UTC](https://community.letsencrypt.org/t/openresty-lua-fails-to-renew-re-issue/104902 "2019-10-26T11:30:52Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![p5ych0](https://avatars.discourse-cdn.com/v4/letter/p/f08c70/32.png) [@p5ych0](https://community.letsencrypt.org/u/p5ych0)\
**Post date:** [October 26, 2019, 11:30am UTC](https://community.letsencrypt.org/t/openresty-lua-fails-to-renew-re-issue/104902/1 "2019-10-26T11:30:52Z")

</div>

I’m using openresty with LUA  
and since yesterday I’m experiencing troubles getting a certificate

nginx log contains the following lines

```
2019/10/26 11:25:53 [error] 772#772: *92 [lua] lets_encrypt.lua:41: issue_cert(): auto-ssl: dehydrated failed: env HOOK_SECRET=bf75b46a196d22066bf75b46a196d22066bf75b46a196d22066 HOOK_SERVER_PORT=8999 /usr/local/openresty/luajit/bin/resty-auto-ssl/dehydrated --cron --accept-terms --no-lock --domain freeroll.khelo365.com --challenge http-01 --config /etc/resty-auto-ssl/letsencrypt/config --hook /usr/local/openresty/luajit/bin/resty-auto-ssl/letsencrypt_hooks status: 256 out: # INFO: Using main config file /etc/resty-auto-ssl/letsencrypt/config
# INFO: Using additional config file /etc/resty-auto-ssl/letsencrypt/conf.d/custom.sh
err:
Error retrieving terms of service from certificate authority.
Please set LICENSE in config manually.
, context: ssl_certificate_by_lua*, client: 63.143.42.247, server: 0.0.0.0:443
2019/10/26 11:25:53 [error] 772#772: *92 [lua] ssl_certificate.lua:97: issue_cert(): auto-ssl: issuing new certificate failed: dehydrated failure, context: ssl_certificate_by_lua*, client: 63.143.42.247, server: 0.0.0.0:443

```

“dehydrated” has not been overriden.

any ideas how to resolve this issue?

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [October 26, 2019, 11:36am UTC](https://community.letsencrypt.org/t/openresty-lua-fails-to-renew-re-issue/104902/2 "2019-10-26T11:36:46Z")

</div>

Hi @p5ych0

> [@p5ych0](#):
>
> err: Error retrieving terms of service from certificate authority.

I don't know how that client works. But that looks you should update your client.

Or check

[https://acme-v02.api.letsencrypt.org/directory](https://acme-v02.api.letsencrypt.org/directory)

there is the url of the "termsOfService". Perhaps you can change your config file manual.

---

<div class="post-metadata">

**Author:** ![p5ych0](https://avatars.discourse-cdn.com/v4/letter/p/f08c70/32.png) [@p5ych0](https://community.letsencrypt.org/u/p5ych0)\
**Post date:** [October 26, 2019, 11:43am UTC](https://community.letsencrypt.org/t/openresty-lua-fails-to-renew-re-issue/104902/3 "2019-10-26T11:43:13Z")

</div>

my current values are

CA=“[https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)”

# Path to certificate authority license terms redirect (default: [https://acme-v01.api.letsencrypt.org/terms](https://acme-v01.api.letsencrypt.org/terms))

CA\_TERMS=“[https://acme-v01.api.letsencrypt.org/terms](https://acme-v01.api.letsencrypt.org/terms)”

# Path to license agreement (default: )

#LICENSE=""

changing to v01 didn’t help

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [October 26, 2019, 11:44am UTC](https://community.letsencrypt.org/t/openresty-lua-fails-to-renew-re-issue/104902/4 "2019-10-26T11:44:51Z")

</div>

v1 is deprecated. Read

> [@End of Life Plan for ACMEv1](https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430):
>
> T…

Support ends 2019-10-31. So you should

- update your client to use v2 (or, if this isn't possible)
- switch to another client

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [October 26, 2019, 11:51am UTC](https://community.letsencrypt.org/t/openresty-lua-fails-to-renew-re-issue/104902/5 "2019-10-26T11:51:35Z")

</div>

PS: That's

> [@p5ych0](#):
>
> CA\_TERMS=“[https://acme-v01.api.letsencrypt.org/terms”](https://acme-v01.api.letsencrypt.org/terms%E2%80%9D)

wrong. Read the v01 - directory, there is another path and file.

---

<div class="post-metadata">

**Author:** ![p5ych0](https://avatars.discourse-cdn.com/v4/letter/p/f08c70/32.png) [@p5ych0](https://community.letsencrypt.org/u/p5ych0)\
**Post date:** [October 26, 2019, 1:57pm UTC](https://community.letsencrypt.org/t/openresty-lua-fails-to-renew-re-issue/104902/6 "2019-10-26T13:57:44Z")

</div>

thank you all. updated the client and everything works fine now.  
case closed ))

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [November 25, 2019, 1:57pm UTC](https://community.letsencrypt.org/t/openresty-lua-fails-to-renew-re-issue/104902/7 "2019-11-25T13:57:46Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
