Plugin Error: Can't parse default-ssl.conf

Osiris · June 13, 2021, 9:53pm

Does that last line contain a space or tab by any chance? Because in that case it might be related to a known bug:

Augeas doesn't like lines starting with a space or tab after </VirtualHost>

opened 07:13PM - 21 Aug 20 UTC

bug area: apache priority: significant

This bug report comes from a bug we encountered on the Community forum: https…://community.letsencrypt.org/t/why-cant-i-certbot-d-toastmastervoice-com-and-create-a-new-virtualhost-and-certificate/131544 It seems Augeas (in the function [`make_vhost_ssl`](https://github.com/certbot/certbot/blob/v1.7.0/certbot-apache/certbot_apache/_internal/configurator.py#L1331-L1380)) isn't too happy about indented comments at the end of an Apache configuration file containing the VirtualHost which it wants to use to make the HTTPS VirtualHost configuration file. I'll report in short here (which *should* be enough I think), but more information can be read on the Community in the link above. ## My operating system is (include version): Gentoo, but it is also present on Debian (see Community thread) ## I installed Certbot with (certbot-auto, OS package manager, pip, etc): I myself used Portage, but the user on the Community was using certbot-auto. ## I ran this command and it produced this output: `certbot --apache -d example.com` Output (important parts of it anyway): ``` (...) What would you like to do? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1: Attempt to reinstall this existing certificate 2: Renew & replace the cert (may be subject to CA rate limits) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1 Keeping the existing certificate Could not reverse map the HTTPS VirtualHost to the original IMPORTANT NOTES: - Unable to install the certificate (...) ``` ## Certbot's behavior differed from what I expected because: Expected output: ``` What would you like to do? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1: Attempt to reinstall this existing certificate 2: Renew & replace the cert (may be subject to CA rate limits) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1 Keeping the existing certificate Created an SSL vhost at /etc/apache2/vhosts.d/vhosts/example.com-le-ssl.conf Deploying Certificate to VirtualHost /etc/apache2/vhosts.d/vhosts/example.com-le-ssl.conf Redirecting vhost in /etc/apache2/vhosts.d/vhosts/example.com.conf to ssl vhost in /etc/apache2/vhosts.d/vhosts/example.com-le-ssl.conf - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Congratulations! You have successfully enabled https://example.com - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ``` ## Here is a Certbot log showing the issue (if available): ###### Logs are stored in `/var/log/letsencrypt` by default. Feel free to redact domains, e-mail and IP addresses as you see fit. You can find a log file of this error on the Community thread: https://community.letsencrypt.org/t/why-cant-i-certbot-d-toastmastervoice-com-and-create-a-new-virtualhost-and-certificate/131544/13 ## Here is the relevant nginx server block or Apache virtualhost for the domain I am configuring: ``` <VirtualHost *:80> ServerName example.com ServerRoot /var/www/example.com </VirtualHost> #Foo bar ```

Topic		Replies	Views
Certbot --apache has error on debian Server	4	2737	August 27, 2016
Error Parsing apache config file Help	4	643	May 16, 2022
PluginError apache / debian Help	3	199	April 29, 2024
Certbot --apache not working : / Help	10	4436	July 25, 2017
Sslh Multiplexer On Linux Systems Causing Certbot TLS-SNI Challenge to Fail Help	16	4398	June 9, 2017

Plugin Error: Can't parse default-ssl.conf

Related topics