Problem with certificates

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: techcomputerworld.com

I ran this command: certbot-auto renew

It produced this output:
root@ubuntu:/home/onzulin# certbot-auto renew

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Processing /etc/letsencrypt/renewal/despedidasexclusivas.com.conf

Cert not yet due for renewal

Processing /etc/letsencrypt/renewal/gamesyap.com.conf

Cert not yet due for renewal

Processing /etc/letsencrypt/renewal/juegos.gamesyap.com.conf

Cert not yet due for renewal

Processing /etc/letsencrypt/renewal/mail.gamesyap.com.conf

Cert is due for renewal, auto-renewing…

Plugins selected: Authenticator standalone, Installer None

Renewing an existing certificate

Performing the following challenges:

http-01 challenge for mail.gamesyap.com

http-01 challenge for mail.izquierdaanarkista.info

http-01 challenge for mail.techcomputerworld.com

Cleaning up challenges

Attempting to renew cert (mail.gamesyap.com) from /etc/letsencrypt/renewal/mail.gamesyap.com.conf produced an unexpected error: Problem binding to port 80: Could not bind to IPv4 or IPv6… Skipping.

Processing /etc/letsencrypt/renewal/prueba.gamesyap.com.conf

Cert not yet due for renewal

Processing /etc/letsencrypt/renewal/techcomputerworld.com.conf

Cert not yet due for renewal

Processing /etc/letsencrypt/renewal/test.gamesyap.com.conf

Cert not yet due for renewal

Processing /etc/letsencrypt/renewal/web.techcomputerworld.com.conf

Cert not yet due for renewal

All renewal attempts failed. The following certs could not be renewed:

/etc/letsencrypt/live/mail.gamesyap.com/fullchain.pem (failure)

The following certs are not due for renewal yet:

/etc/letsencrypt/live/despedidasexclusivas.com/fullchain.pem expires on 2019-11-19 (skipped)

/etc/letsencrypt/live/gamesyap.com/fullchain.pem expires on 2020-01-07 (skipped)

/etc/letsencrypt/live/juegos.gamesyap.com/fullchain.pem expires on 2019-12-16 (skipped)

/etc/letsencrypt/live/prueba.gamesyap.com/fullchain.pem expires on 2020-01-13 (skipped)

/etc/letsencrypt/live/techcomputerworld.com/fullchain.pem expires on 2019-12-30 (skipped)

/etc/letsencrypt/live/test.gamesyap.com/fullchain.pem expires on 2020-01-14 (skipped)

/etc/letsencrypt/live/web.techcomputerworld.com/fullchain.pem expires on 2019-11-28 (skipped)

All renewal attempts failed. The following certs could not be renewed:

/etc/letsencrypt/live/mail.gamesyap.com/fullchain.pem (failure)

1 renew failure(s), 0 parse failure(s)

My web server is (include version): nginx version: nginx/1.14.0 (Ubuntu)

The operating system my web server runs on is (include version): Ubuntu Server 18.04

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.39.0

2

I'm not sure, but can you renew certificates that expired more than a month ago?

3

Hi @onzulin

if you use standalone, a new webserver is startet.

But if there is already a running webserver,

so it's impossible to start a new.

So you have two options:

  • stop the running webserver, then start the command (or, better)
  • use the running webserver

There is a nginx, what says

nginx -T
4

Ok the problem is
root@ubuntu:/etc/nginx/sites-available# nginx -t
nginx: [warn] conflicting server name “mail.gamesyap.com” on 0.0.0.0:80, ignored
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
It is clear that the problem is in this line
nginx: [warn] conflicting server name “mail.gamesyap.com” on 0.0.0.0:80, ignored

5

I found the solution in using the command:
certbot-auto renew
But stopping the nginx server and renewing all certificates again

2 Likes
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.