The cert did not auto renew by acme.sh cronjob

Unless you can restart the service OR reboot the server...
There is not much you can do.
image

2 Likes

I suggested to restart the server to the support team. Since I am using a shared hosting it is not possible to restart the team stated.

Usually this kind of thing is managed by cPanel on shared hosting. Change something in cPanel which would require a webserver reload and it should reload the webserver. Or the webserver is periodically reloaded or something like that.

It would have been helpful if you informed us about being on shared hosting from the beginning. I alluded about this missing information from the questionnaire answers you provided a day ago, but for some reason you didn't tell us.

You did post a screenshot about the server information. Was that so we would be required to deduce the fact you are on shared hosting ourselves?

5 Likes

I apologize for not specifying the information.

What can be changed to reload the webserver?

I don't have experience with cPanel, but usually it contains a SSL or TLS section where you can specifiy/upload a certificate with its chain and the private key?

See e.g. https://www.namecheap.com/support/knowledgebase/article.aspx/9418/33/installing-an-ssl-certificate-on-your-server-using-cpanel/

Note that the above probably means you can't make renewals automatic. That's always difficult when on shared hosting.

By the way, how did you install the renewed certificates before?

5 Likes

This will be the first time for the cert renewal. I installed the certs as instructed in the link that you have provided from Namecheap.

Again, the certs have been renewed by the cronjob as shown in the screenshot. But the SSL/TLS section is unable to recognize the renewed certs from the acme.sh folder I guess.

But below you're saying:

How do you mean "unable to recognize"? Why would that be important if you already installed the certificate, chain and private key according to the instructions from Namecheap as linked above?

Maybe you can show with multiple screenshots what you actually did?

3 Likes

I mean that the cpanel SSL/TLS section is not checking itself for the renewed certs.

This is how I installed the cert for domain:

  1. Run acme.sh script to generate the letsencrypt cert
  2. Copy the generated cert and private key from .acme.sh folder from the root directory
  3. paste the cert and key to a specific domain in SLL/TLS section.
  4. Clicking Install.

If that didn't throw any errors, but "just worked", I'm not sure what more you can do. Except for ask Namecheap for help (again). It's their shared hosting, their cPanel and they should enable you to install the cert. (Unless they'll try to trick you into buying a cert from them.)

4 Likes

I would try removing the cert from cPanel [not from the system - not from acme.sh].
Then insert it back into cPanel.
[maybe that will trigger it into using the new one]

4 Likes

Do you mean uninstalling from SSL/TLS section and reinstalling same cert?

1 Like

Yes.

2 Likes

@Osiris Does auto renewal has to do something with DNS integration. I was looking into the acme.sh Github page and found a Automatic DNS Integration:

Namecheap DNS Provider:

A tiny little bit. If you're using the dns-01 challenge (which you are NOT it seems looking at the -w option from your initial command), you'd need some kind of DNS integration to be able to automatically renew.

So it CAN be connected, but doesn't seem to be in your situation. In any case it would be relevant to ISSUE a certificate, where you said you already renewed the certificate succesfully, so I'm pretty sure it's not relevant for you.

The fact you're asking this leads me to believe you don't fully grasp how the ACME protocol works with the different challenges. I would like to recommend you to read the Let's Encrypt documentation at Documentation - Let's Encrypt especially the part about the challenge types.

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.