[Solved] Error: Nginx plugin is not working

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
monitor.wcufiber.net

I ran this command:
sudo certbot renew --nginx
sudo /usr/bin/certbot renew --preferred-challenges http

It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

Processing /etc/letsencrypt/renewal/monitor.wcufiber.net.conf

Cert is due for renewal, auto-renewing...
Error while running nginx -c /etc/nginx/nginx.conf -t.

nginx: [emerg] cannot load certificate "/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
nginx: configuration file /etc/nginx/nginx.conf test failed

Could not choose appropriate plugin: The nginx plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError('Error while running nginx -c /etc/nginx/nginx.conf -t.\n\nnginx: [emerg] cannot load certificate "/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)\nnginx: configuration file /etc/nginx/nginx.conf test failed\n')
Failed to renew certificate monitor.wcufiber.net with error: The nginx plugin is not working; there may be problems with your existing configuration.
The error was: MisconfigurationError('Error while running nginx -c /etc/nginx/nginx.conf -t.\n\nnginx: [emerg] cannot load certificate "/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)\nnginx: configuration file /etc/nginx/nginx.conf test failed\n')

Processing /etc/letsencrypt/renewal/observium.wcufiber.net.conf

Cert not yet due for renewal

The following certificates are not due for renewal yet:
/etc/letsencrypt/live/observium.wcufiber.net/fullchain.pem expires on 2021-05-12 (skipped)
All renewals failed. The following certificates could not be renewed:
/etc/letsencrypt/live/monitor.wcufiber.net/fullchain.pem (failure)

1 renew failure(s), 0 parse failure(s)

My web server is (include version):

nginx version: nginx/1.16.1

The operating system my web server runs on is (include version):
CentOS 7

My hosting provider, if applicable, is:
none

I can login to a root shell on my machine (yes or no, or I don't know):
Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

certbot 1.12.0

2

Additional info:

I tried to restart nginx and recevied the following:

[mdittmer@servicedesk ~]$ sudo systemctl restart nginx
Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.
[mdittmer@servicedesk ~]$
[mdittmer@servicedesk ~]$
[mdittmer@servicedesk ~]$
[mdittmer@servicedesk ~]$ systemctl status nginx
● nginx.service - The nginx HTTP and reverse proxy server
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Mon 2021-03-01 08:52:30 CST; 33s ago
  Process: 23886 ExecReload=/bin/kill -s HUP $MAINPID (code=exited, status=0/SUCCESS)
  Process: 27904 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=1/FAILURE)
  Process: 27902 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS)
 Main PID: 75863 (code=exited, status=0/SUCCESS)

Mar 01 08:52:30 servicedesk systemd[1]: Starting The nginx HTTP and reverse proxy server...
Mar 01 08:52:30 servicedesk nginx[27904]: nginx: [emerg] cannot load certificate "/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or di...
Mar 01 08:52:30 servicedesk nginx[27904]: nginx: configuration file /etc/nginx/nginx.conf test failed
Mar 01 08:52:30 servicedesk systemd[1]: nginx.service: control process exited, code=exited status=1
Mar 01 08:52:30 servicedesk systemd[1]: Failed to start The nginx HTTP and reverse proxy server.
Mar 01 08:52:30 servicedesk systemd[1]: Unit nginx.service entered failed state.
Mar 01 08:52:30 servicedesk systemd[1]: nginx.service failed.
Hint: Some lines were ellipsized, use -l to show in full.
[mdittmer@servicedesk ~]$
[mdittmer@servicedesk ~]$
[mdittmer@servicedesk ~]$ sudo systemctl start nginx
Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.
[mdittmer@servicedesk ~]$
[mdittmer@servicedesk ~]$
[mdittmer@servicedesk ~]$ systemctl status nginx.service
● nginx.service - The nginx HTTP and reverse proxy server
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Mon 2021-03-01 08:53:23 CST; 12s ago
  Process: 23886 ExecReload=/bin/kill -s HUP $MAINPID (code=exited, status=0/SUCCESS)
  Process: 27967 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=1/FAILURE)
  Process: 27965 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS)
 Main PID: 75863 (code=exited, status=0/SUCCESS)

Mar 01 08:53:23 servicedesk systemd[1]: Starting The nginx HTTP and reverse proxy server...
Mar 01 08:53:23 servicedesk nginx[27967]: nginx: [emerg] cannot load certificate "/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or di...
Mar 01 08:53:23 servicedesk nginx[27967]: nginx: configuration file /etc/nginx/nginx.conf test failed
Mar 01 08:53:23 servicedesk systemd[1]: nginx.service: control process exited, code=exited status=1
Mar 01 08:53:23 servicedesk systemd[1]: Failed to start The nginx HTTP and reverse proxy server.
Mar 01 08:53:23 servicedesk systemd[1]: Unit nginx.service entered failed state.
Mar 01 08:53:23 servicedesk systemd[1]: nginx.service failed.
Hint: Some lines were ellipsized, use -l to show in full.
[mdittmer@servicedesk ~]$
[mdittmer@servicedesk ~]$
[mdittmer@servicedesk ~]$ systemctl status nginx.service -l
● nginx.service - The nginx HTTP and reverse proxy server
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Mon 2021-03-01 08:53:23 CST; 22s ago
  Process: 23886 ExecReload=/bin/kill -s HUP $MAINPID (code=exited, status=0/SUCCESS)
  Process: 27967 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=1/FAILURE)
  Process: 27965 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS)
 Main PID: 75863 (code=exited, status=0/SUCCESS)

Mar 01 08:53:23 servicedesk systemd[1]: Starting The nginx HTTP and reverse proxy server...
Mar 01 08:53:23 servicedesk nginx[27967]: nginx: [emerg] cannot load certificate "/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/confluence.waverlyutilities.com/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
Mar 01 08:53:23 servicedesk nginx[27967]: nginx: configuration file /etc/nginx/nginx.conf test failed
Mar 01 08:53:23 servicedesk systemd[1]: nginx.service: control process exited, code=exited status=1
Mar 01 08:53:23 servicedesk systemd[1]: Failed to start The nginx HTTP and reverse proxy server.
Mar 01 08:53:23 servicedesk systemd[1]: Unit nginx.service entered failed state.
Mar 01 08:53:23 servicedesk systemd[1]: nginx.service failed.

We are no longer running confluence.wcufiber.net and I don't know why it is still part of the nginx config.

Any ideas?

3

We were able to fix the issue be removing the old website.

We removed the cert from certbot, but forgot the website config.

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.