Renewal done, but still expired

Stonethree · November 15, 2018, 1:12pm

Hi,

Okay, so changed between http-01 and tls-sni-01. http-01 completes sucessful but tls-sni-01 fails.

Could this be because of the certificate been generated via tls and not http originally?

Checked the links and all is good, no errors.

Thanks.

Stonethree · November 15, 2018, 1:13pm

Hi,

Herei s the output:

Thanks.

jmorahan · November 15, 2018, 1:16pm

Can you please share the output of:

ls -al /etc/letsencrypt/{live,archive}/label.stonethree.com

Stonethree · November 15, 2018, 1:33pm

Hi,

Output below:

root@label:~# ls -al /etc/letsencrypt/live/label.stonethree.com
total 12
drwxr-xr-x 2 www-data root 4096 Nov 15 14:22 .
drwx------ 4 root root 4096 Nov 6 15:26 …
-rw-r–r-- 1 www-data root 682 Aug 17 15:18 README
lrwxrwxrwx 1 root root 49 Nov 15 14:22 cert.pem -> …/…/archive/label.stonethree.com-0001/cert1.pem
lrwxrwxrwx 1 root root 50 Nov 15 14:22 chain.pem -> …/…/archive/label.stonethree.com-0001/chain1.pem
lrwxrwxrwx 1 root root 54 Nov 15 14:22 fullchain.pem -> …/…/archive/label.stonethree.com-0001/fullchain1.pem
lrwxrwxrwx 1 root root 52 Nov 15 14:22 privkey.pem -> …/…/archive/label.stonethree.com-0001/privkey1.pem
root@label:~# ls -al /etc/letsencrypt/archive/label.stonethree.com
total 48
drwxr-xr-x 4 www-data root 4096 Nov 15 08:33 .
drwx------ 5 root root 4096 Nov 13 09:56 …
-rw-r–r-- 1 www-data root 2163 Nov 6 15:31 cert1.pem
-rw-r–r-- 1 root root 1923 Nov 15 14:22 cert2.pem
-rw-r–r-- 1 www-data root 1647 Nov 6 15:31 chain1.pem
-rw-r–r-- 1 root root 1647 Nov 15 14:22 chain2.pem
-rw-r–r-- 1 www-data root 3810 Nov 6 15:31 fullchain1.pem
-rw-r–r-- 1 root root 3570 Nov 15 14:22 fullchain2.pem
drwxr-xr-x 2 root root 4096 May 18 15:10 label.stonethree.com
drwxr-xr-x 2 www-data root 4096 Aug 17 15:18 label.stonethree.com-0001
-rw-r–r-- 1 www-data root 1704 Nov 6 15:31 privkey1.pem
-rw-r–r-- 1 root root 1708 Nov 15 14:22 privkey2.pem

Thanks.

jmorahan · November 15, 2018, 1:54pm

Yep, once again, the symbolic links are pointing to ../../archive/label.stonethree.com-0001/... instead of ../../archive/label.stonethree.com/... which is wrong.

You probably don’t want to rename the directories back at this point, since your nginx config is presumably pointed at the current directory. Instead you can delete the symbolic links and recreate them correctly:

cd /etc/letsencrypt/live/label.stonethree.com
rm *.pem
ln -s ../../archive/label.stonethree.com/cert2.pem cert.pem
ln -s ../../archive/label.stonethree.com/chain2.pem chain.pem
ln -s ../../archive/label.stonethree.com/fullchain2.pem fullchain.pem
ln -s ../../archive/label.stonethree.com/privkey2.pem privkey.pem

Stonethree · November 15, 2018, 2:10pm

Hi,

Awesome, it’s resolved. As always, thanks for the help, much appreciated.

Thanks.

system · December 15, 2018, 2:11pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.