Requesting a certificate - Invalid response from ... 204

CoroXx3 · February 21, 2024, 6:29pm

Found the following certs:
Certificate Name: justsnoxbingo.com
Serial Number: 3eda6207de401558869034e31cd05fba413
Key Type: ECDSA
Domains: justsnoxbingo.com www.justsnoxbingo.com
Expiry Date: 2024-05-21 16:49:16+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/justsnoxbingo.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/justsnoxbingo.com/privkey.pem

rg305 · February 21, 2024, 6:30pm

That is a very strange error message.
The key is ECDSA - not RSA and not 1024 bit length.

CoroXx3 · February 21, 2024, 6:30pm

How would i go to change that?

rg305 · February 21, 2024, 6:34pm

You can't.
Let's try to workaround that error message.

Let's try having certbot do the work for you, with:
certbot --nginx -d justsnoxbingo.com -d www.justsnoxbingo.com

Choose options NOT to renew the cert but YES to [re-]install it.

CoroXx3 · February 21, 2024, 6:36pm

1: Attempt to reinstall this existing certificate

It gives me the same error:
Unsupported RSA key length: 1024

rg305 · February 21, 2024, 6:37pm

What shows?:
certbot --version

CoroXx3 · February 21, 2024, 6:37pm

It shows:
certbot 2.9.0

rg305 · February 21, 2024, 6:38pm

Please show this file:

CoroXx3 · February 21, 2024, 6:40pm

rg305 · February 21, 2024, 6:48pm

As expected, that leaf cert is NOT RSA 1024:

And neither is the chain cert:

Let's have a look at the log file... maybe there is a clue about why this error is happening in the logs.
/var/log/letsencrypt/letsencrypt.log

CoroXx3 · February 21, 2024, 6:51pm

2024-02-21 18:35:30,500:DEBUG:urllib3.connectionpool:Starting new HTTP connection (1): r3.o.lencr.org:80
2024-02-21 18:35:30,519:DEBUG:urllib3.connectionpool:http://r3.o.lencr.org:80 "POST / HTTP/1.1" 200 503
2024-02-21 18:35:30,519:DEBUG:certbot.ocsp:OCSP response for certificate /etc/letsencrypt/archive/justsnoxbingo.com/cert2.pem is signe>
2024-02-21 18:35:30,520:DEBUG:certbot.ocsp:OCSP certificate status for /etc/letsencrypt/archive/justsnoxbingo.com/cert2.pem is: OCSPCe>
2024-02-21 18:35:30,523:DEBUG:certbot._internal.display.obj:Notifying user: Certificate not yet due for renewal
2024-02-21 18:35:42,010:INFO:certbot._internal.main:Keeping the existing certificate

2024-02-21 18:35:42,010:DEBUG:certbot._internal.display.obj:Notifying user: Deploying certificate
2024-02-21 18:35:42,015:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/usr/local/lib/python3.10/dist-packages/certbot/_internal/client.py", line 657, in deploy_certificate
    self.installer.deploy_cert(
  File "/usr/lib/python3/dist-packages/certbot_nginx/_internal/configurator.py", line 232, in deploy_cert
    vhosts = self.choose_vhosts(domain, create_if_no_match=True)
  File "/usr/lib/python3/dist-packages/certbot_nginx/_internal/configurator.py", line 352, in choose_vhosts
    self._make_server_ssl(vhost)
  File "/usr/lib/python3/dist-packages/certbot_nginx/_internal/configurator.py", line 732, in _make_server_ssl
    snakeoil_cert, snakeoil_key = self._get_snakeoil_paths()
  File "/usr/lib/python3/dist-packages/certbot_nginx/_internal/configurator.py", line 678, in _get_snakeoil_paths
    le_key = crypto_util.generate_key(
  File "/usr/local/lib/python3.10/dist-packages/certbot/crypto_util.py", line 81, in generate_key
    key_pem = make_key(
  File "/usr/local/lib/python3.10/dist-packages/certbot/crypto_util.py", line 225, in make_key
    raise errors.Error("Unsupported RSA key length: {}".format(bits))
certbot.errors.Error: Unsupported RSA key length: 1024

2024-02-21 18:35:42,015:DEBUG:certbot._internal.error_handler:Calling registered functions
2024-02-21 18:35:42,089:DEBUG:certbot._internal.display.obj:Notifying user: Could not install certificate
2024-02-21 18:35:42,089:DEBUG:certbot._internal.display.obj:Notifying user: NEXT STEPS:
2024-02-21 18:35:42,089:DEBUG:certbot._internal.display.obj:Notifying user: - The certificate was saved, but could not be installed (i>
  certbot install --cert-name justsnoxbingo.com
2024-02-21 18:35:42,089:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/local/bin/certbot", line 8, in <module>
    sys.exit(main())
  File "/usr/local/lib/python3.10/dist-packages/certbot/main.py", line 19, in main
    return internal_main.main(cli_args)
  File "/usr/local/lib/python3.10/dist-packages/certbot/_internal/main.py", line 1894, in main
    return config.func(config, plugins)
  File "/usr/local/lib/python3.10/dist-packages/certbot/_internal/main.py", line 1480, in run
    raise installer_err
  File "/usr/local/lib/python3.10/dist-packages/certbot/_internal/main.py", line 1464, in run

    _install_cert(config, le_client, domains, new_lineage)
  File "/usr/local/lib/python3.10/dist-packages/certbot/_internal/main.py", line 1058, in _install_cert
    le_client.deploy_certificate(domains, path_provider.key_path, path_provider.cert_path,
  File "/usr/local/lib/python3.10/dist-packages/certbot/_internal/client.py", line 657, in deploy_certificate
    self.installer.deploy_cert(
  File "/usr/lib/python3/dist-packages/certbot_nginx/_internal/configurator.py", line 232, in deploy_cert
    vhosts = self.choose_vhosts(domain, create_if_no_match=True)
  File "/usr/lib/python3/dist-packages/certbot_nginx/_internal/configurator.py", line 352, in choose_vhosts
    self._make_server_ssl(vhost)
  File "/usr/lib/python3/dist-packages/certbot_nginx/_internal/configurator.py", line 732, in _make_server_ssl
    snakeoil_cert, snakeoil_key = self._get_snakeoil_paths()
  File "/usr/lib/python3/dist-packages/certbot_nginx/_internal/configurator.py", line 678, in _get_snakeoil_paths
    le_key = crypto_util.generate_key(
  File "/usr/local/lib/python3.10/dist-packages/certbot/crypto_util.py", line 81, in generate_key
    key_pem = make_key(
  File "/usr/local/lib/python3.10/dist-packages/certbot/crypto_util.py", line 225, in make_key
    raise errors.Error("Unsupported RSA key length: {}".format(bits))
certbot.errors.Error: Unsupported RSA key length: 1024
2024-02-21 18:35:42,089:ERROR:certbot._internal.log:Unsupported RSA key length: 1024

rg305 · February 21, 2024, 6:57pm

Two things I see "wrong" there:

it's using a "snakeoil" cert [not your certbot cert]
it's using python3 outside of snap

Do you use python in your system?
How/when did you install python?

CoroXx3 · February 21, 2024, 7:01pm

I am not using anything using python right now as far as I know of right now

sudo apt install python3

Edit: Is there a way to fix this easy?

CoroXx3 · February 21, 2024, 8:07pm

Did a reinstall of ubunut and everything is working now

system · March 22, 2024, 8:07pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Invalid response 204 for the main domain Help	7	271	August 10, 2024
GERTIFICATE - Invalid response from Help	3	163	June 23, 2024
Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems: Help	3	116	February 1, 2025
Certbot: "Invalid response" while trying to obtain a certificate Help	5	1115	July 7, 2020
Invalid response from...on nginx Help	3	2115	August 1, 2020

Requesting a certificate - Invalid response from ... 204

Related topics