"Unexpected error: Incomplete authorizations. Skipping."


#1

For the last year, I’ve been using certbot-auto without issue. Today, certbot updated to the latest version and I am unable to renew any certs now.

This is the error from my logs:

2018-04-11 21:05:32,754:DEBUG:certbot.error_handler:Calling registered functions
2018-04-11 21:05:32,756:INFO:certbot.auth_handler:Cleaning up challenges
2018-04-11 21:05:32,758:DEBUG:certbot.plugins.webroot:Removing /var/www/html/certbot/.well-known/acme-challenge/9y4Yi1an0B4FQfD0pKU_TzmhFsID0db0ek4tg82caHQ
2018-04-11 21:05:32,763:DEBUG:certbot.plugins.webroot:All challenges cleaned up
2018-04-11 21:05:32,806:WARNING:certbot.renewal:Attempting to renew cert (black-prism.net) from /etc/letsencrypt/renewal/black-prism.net.conf produced an unexpected error: Incomplete authorizations. Skipping.
2018-04-11 21:05:32,817:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
  File "/opt/eff.org/certbot/venv/lib64/python3.4/site-packages/certbot/renewal.py", line 422, in handle_renewal_request
    main.renew_cert(lineage_config, plugins, renewal_candidate)
  File "/opt/eff.org/certbot/venv/lib64/python3.4/site-packages/certbot/main.py", line 1102, in renew_cert
    _get_and_save_cert(le_client, config, lineage=lineage)
  File "/opt/eff.org/certbot/venv/lib64/python3.4/site-packages/certbot/main.py", line 113, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/opt/eff.org/certbot/venv/lib64/python3.4/site-packages/certbot/renewal.py", line 297, in renew_cert
    new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains)
  File "/opt/eff.org/certbot/venv/lib64/python3.4/site-packages/certbot/client.py", line 294, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  File "/opt/eff.org/certbot/venv/lib64/python3.4/site-packages/certbot/client.py", line 330, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
  File "/opt/eff.org/certbot/venv/lib64/python3.4/site-packages/certbot/auth_handler.py", line 83, in handle_authorizations
    self.verify_authzr_complete(aauthzrs)
  File "/opt/eff.org/certbot/venv/lib64/python3.4/site-packages/certbot/auth_handler.py", line 330, in verify_authzr_complete
    raise errors.AuthorizationError("Incomplete authorizations")
certbot.errors.AuthorizationError: Incomplete authorizations

I don’t understand what has changed as this has been working for about a year now. Please advise. Thank you.


#2

Sorry for the trouble. This is an error we are tracking that occurs for some users during peak load: https://github.com/letsencrypt/boulder/issues/3641.

Try again a few times and you should succeed. If not please post here and we’ll dig deeper.


#3

Hello,

I am struggling with the same issue. I am using standalone certbot. I have been trying to renew my certificates many times, still with the same result. I am using certbot/certbot:v0.22.2 docker image.

Cleaning up challenges
Stopping server at :::80…
Attempting to renew cert (xxx) from /etc/letsencrypt/renewal/xxxx.conf produced an unexpected error: Incomplete authorizations. Skipping.
Traceback was:
Traceback (most recent call last):
File “/opt/certbot/src/certbot/renewal.py”, line 422, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File “/opt/certbot/src/certbot/main.py”, line 1102, in renew_cert
_get_and_save_cert(le_client, config, lineage=lineage)
File “/opt/certbot/src/certbot/main.py”, line 113, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File “/opt/certbot/src/certbot/renewal.py”, line 297, in renew_cert
new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains)
File “/opt/certbot/src/certbot/client.py”, line 294, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File “/opt/certbot/src/certbot/client.py”, line 330, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
File “/opt/certbot/src/certbot/auth_handler.py”, line 82, in handle_authorizations
self.verify_authzr_complete(aauthzrs)
File “/opt/certbot/src/certbot/auth_handler.py”, line 325, in verify_authzr_complete
raise errors.AuthorizationError(“Incomplete authorizations”)
AuthorizationError: Incomplete authorizations

Anyone knew how to resolve this issue?


#4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.