[SOLVED] Snap.certbot.renew.service failed

For some reason certbot isn’t running this morning on my server. Any tips?

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: thepowerpowerhousemethod.org

I ran this command: sudo snap start certbot

It produced this output:

  • start of [certbot.renew] (# systemctl start snap.certbot.renew.service
    Job for snap.certbot.renew.service failed because the control process exited with error code. See “systemctl status snap.certbot.renew.service” and “journalctl -xe” for details.
    )
  • start of [certbot.renew] (exit status 1)
    [orca@orcacomputers ~]$ systemctl status snap.certbot.renew.service
    ● snap.certbot.renew.service - Service for snap application certbot.renew
    Loaded: loaded (/etc/systemd/system/snap.certbot.renew.service; disabled; vendor preset: disabled)
    Active: failed (Result: exit-code) since Thu 2020-09-17 09:13:01 PDT; 35s ago
    Process: 16310 ExecStart=/usr/bin/snap run --timer=“00:00~24:00/2” certbot.renew (code=exited, status=1/FAILURE)
    Main PID: 16310 (code=exited, status=1/FAILURE)

Sep 17 09:13:00 orcacomputers.orcainbox certbot.renew[16310]: Challenge failed for domain macdougall.ninja
Sep 17 09:13:00 orcacomputers.orcainbox certbot.renew[16310]: Attempting to renew cert (hopetonmedia.com) from /etc/letsencrypt/renewal/hopetonmedia.com.conf produced an unexpected error: Some cha… Skipping.
Sep 17 09:13:01 orcacomputers.orcainbox certbot.renew[16310]: All renewal attempts failed. The following certs could not be renewed:
Sep 17 09:13:01 orcacomputers.orcainbox certbot.renew[16310]: /etc/letsencrypt/live/freeonlinemoney.net/fullchain.pem (failure)
Sep 17 09:13:01 orcacomputers.orcainbox certbot.renew[16310]: /etc/letsencrypt/live/hopetonmedia.com/fullchain.pem (failure)
Sep 17 09:13:01 orcacomputers.orcainbox certbot.renew[16310]: 2 renew failure(s), 0 parse failure(s)
Sep 17 09:13:01 orcacomputers.orcainbox systemd[1]: snap.certbot.renew.service: main process exited, code=exited, status=1/FAILURE
Sep 17 09:13:01 orcacomputers.orcainbox systemd[1]: Failed to start Service for snap application certbot.renew.
Sep 17 09:13:01 orcacomputers.orcainbox systemd[1]: Unit snap.certbot.renew.service entered failed state.
Sep 17 09:13:01 orcacomputers.orcainbox systemd[1]: snap.certbot.renew.service failed.
Hint: Some lines were ellipsized, use -l to show in full.
[orca@orcacomputers ~] journal -xe bash: journal: command not found... [orca@orcacomputers ~] journalctl -xe | egrep certbot
Sep 17 08:59:12 orcacomputers.orcainbox sudo[14587]: orca : TTY=pts/0 ; PWD=/home/orca ; USER=root ; COMMAND=/bin/snap start certbot
Sep 17 08:59:12 orcacomputers.orcainbox systemd[1]: Starting Service for snap application certbot.renew…
– Subject: Unit snap.certbot.renew.service has begun start-up
– Unit snap.certbot.renew.service has begun starting up.
Sep 17 09:00:13 orcacomputers.orcainbox snapd[2099]: taskrunner.go:271: [change 33 “start of [certbot.renew]” task] failed: exceeded maximum runtime of 1m1s
Sep 17 09:00:19 orcacomputers.orcainbox sudo[14828]: orca : TTY=pts/0 ; PWD=/home/orca ; USER=root ; COMMAND=/bin/snap start certbot
Sep 17 09:01:20 orcacomputers.orcainbox snapd[2099]: taskrunner.go:271: [change 34 “start of [certbot.renew]” task] failed: exceeded maximum runtime of 1m1s
Sep 17 09:03:06 orcacomputers.orcainbox sudo[15303]: orca : TTY=pts/0 ; PWD=/home/orca ; USER=root ; COMMAND=/bin/snap status certbot
Sep 17 09:03:25 orcacomputers.orcainbox sudo[15340]: orca : TTY=pts/0 ; PWD=/home/orca ; USER=root ; COMMAND=/bin/snap certificates certbot
Sep 17 09:05:03 orcacomputers.orcainbox sudo[15557]: orca : TTY=pts/0 ; PWD=/home/orca ; USER=root ; COMMAND=/bin/snap start certbot
Sep 17 09:05:27 orcacomputers.orcainbox certbot.renew[14603]: Challenge failed for domain freeonlinemoney.net
Sep 17 09:05:27 orcacomputers.orcainbox certbot.renew[14603]: Challenge failed for domain www.freeonlinemoney.net
Sep 17 09:05:27 orcacomputers.orcainbox certbot.renew[14603]: Attempting to renew cert (freeonlinemoney.net) from /etc/letsencrypt/renewal/freeonlinemoney.net.conf produced an unexpected error: Some challenges have failed… Skipping.
Sep 17 09:05:37 orcacomputers.orcainbox certbot.renew[14603]: Challenge failed for domain macdougall.ninja
Sep 17 09:05:38 orcacomputers.orcainbox certbot.renew[14603]: Attempting to renew cert (hopetonmedia.com) from /etc/letsencrypt/renewal/hopetonmedia.com.conf produced an unexpected error: Some challenges have failed… Skipping.
Sep 17 09:05:39 orcacomputers.orcainbox certbot.renew[14603]: All renewal attempts failed. The following certs could not be renewed:
Sep 17 09:05:39 orcacomputers.orcainbox certbot.renew[14603]: /etc/letsencrypt/live/freeonlinemoney.net/fullchain.pem (failure)
Sep 17 09:05:39 orcacomputers.orcainbox certbot.renew[14603]: /etc/letsencrypt/live/hopetonmedia.com/fullchain.pem (failure)
Sep 17 09:05:39 orcacomputers.orcainbox certbot.renew[14603]: 2 renew failure(s), 0 parse failure(s)
Sep 17 09:05:39 orcacomputers.orcainbox systemd[1]: snap.certbot.renew.service: main process exited, code=exited, status=1/FAILURE
Sep 17 09:05:39 orcacomputers.orcainbox systemd[1]: Failed to start Service for snap application certbot.renew.
– Subject: Unit snap.certbot.renew.service has failed
– Unit snap.certbot.renew.service has failed.
Sep 17 09:05:39 orcacomputers.orcainbox systemd[1]: Unit snap.certbot.renew.service entered failed state.
Sep 17 09:05:39 orcacomputers.orcainbox systemd[1]: snap.certbot.renew.service failed.
Sep 17 09:05:39 orcacomputers.orcainbox snapd[2099]: taskrunner.go:271: [change 35 “start of [certbot.renew]” task] failed: exit status 1
Sep 17 09:12:25 orcacomputers.orcainbox sudo[16293]: orca : TTY=pts/0 ; PWD=/home/orca ; USER=root ; COMMAND=/bin/snap start certbot
Sep 17 09:12:25 orcacomputers.orcainbox systemd[1]: Starting Service for snap application certbot.renew…
– Subject: Unit snap.certbot.renew.service has begun start-up
– Unit snap.certbot.renew.service has begun starting up.
Sep 17 09:12:49 orcacomputers.orcainbox certbot.renew[16310]: Challenge failed for domain freeonlinemoney.net
Sep 17 09:12:49 orcacomputers.orcainbox certbot.renew[16310]: Challenge failed for domain www.freeonlinemoney.net
Sep 17 09:12:50 orcacomputers.orcainbox certbot.renew[16310]: Attempting to renew cert (freeonlinemoney.net) from /etc/letsencrypt/renewal/freeonlinemoney.net.conf produced an unexpected error: Some challenges have failed… Skipping.
Sep 17 09:13:00 orcacomputers.orcainbox certbot.renew[16310]: Challenge failed for domain macdougall.ninja
Sep 17 09:13:00 orcacomputers.orcainbox certbot.renew[16310]: Attempting to renew cert (hopetonmedia.com) from /etc/letsencrypt/renewal/hopetonmedia.com.conf produced an unexpected error: Some challenges have failed… Skipping.
Sep 17 09:13:01 orcacomputers.orcainbox certbot.renew[16310]: All renewal attempts failed. The following certs could not be renewed:
Sep 17 09:13:01 orcacomputers.orcainbox certbot.renew[16310]: /etc/letsencrypt/live/freeonlinemoney.net/fullchain.pem (failure)
Sep 17 09:13:01 orcacomputers.orcainbox certbot.renew[16310]: /etc/letsencrypt/live/hopetonmedia.com/fullchain.pem (failure)
Sep 17 09:13:01 orcacomputers.orcainbox certbot.renew[16310]: 2 renew failure(s), 0 parse failure(s)
Sep 17 09:13:01 orcacomputers.orcainbox systemd[1]: snap.certbot.renew.service: main process exited, code=exited, status=1/FAILURE
Sep 17 09:13:01 orcacomputers.orcainbox systemd[1]: Failed to start Service for snap application certbot.renew.
– Subject: Unit snap.certbot.renew.service has failed
– Unit snap.certbot.renew.service has failed.
Sep 17 09:13:01 orcacomputers.orcainbox systemd[1]: Unit snap.certbot.renew.service entered failed state.
Sep 17 09:13:01 orcacomputers.orcainbox systemd[1]: snap.certbot.renew.service failed.
Sep 17 09:13:01 orcacomputers.orcainbox snapd[2099]: taskrunner.go:271: [change 36 “start of [certbot.renew]” task] failed: exit status 1

My web server is (include version): Apache 2.4.6

The operating system my web server runs on is (include version): CentOS7

My hosting provider, if applicable, is: Godaddy

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 1.8.0

For some reason certbot isn’t running this morning on my server. Any tips?

I’m gonna have to ask about this one.

@bmw, @_az

I know we’ve had a discussion recently about posting to GitHub, but I’m honestly not sure how to triage this one. Any thoughts?

The command sudo snap start certbot starts the systemd service used for renewal. If you run the command sudo /snap/bin/certbot renew, I suspect you’ll have the same issue which is the much more common problem of failing domain validation challenges, but the output will be much easier to read.

/snap/bin/certbot renew showed me a few error httpd was having. I was able to solve is thanks to you =)