My domain is: I ran this command: certbot renewal And dig @8.8.8.8 acme-v1.letsencrypt.org (from several servers) It produced this output: Attempting to renew cert (xxxx) from /etc/letsencrypt/renewal/nwh.c Xxxx.de.conf produced an unexpected error: ("bad handshake: Error([('SSL ro utines', …

[image] rg305: Change that to v2. These have no A records: acme-v1.api.letsencrypt.org acme-v2.api.letsencrypt.org acme-v01.api.letsencrypt.org This does: acme-v02.api.letsencrypt.org

I think the same with DST Root CA X3 expiration. How can I resolve this?

That's where @rg305 is headed. He has been the master of solving such here. :grin:

[image] ole1986: How can I resolve this? [image] rg305: You may need to update your ca-certificates

acme-v02.api.letsencrypt.org is reachable and seem to work. Anyway I have updated to certbot 1.21. and it just worked well, too So it seems that certbot 1.21 does not use the cli.ini located in /etc/letsencrypt/ anymore? UPDATE: certbot 1.21 uses the cli.ini. And during the installation it has co…

https://certbot.eff.org/docs/using.html#configuration-file

Anywho... this might also be useful: [image] DST Root CA X3 expiry countdown Looks like a workaround for now is changing /etc/ca-certificates.conf : mozilla/DST_Root_CA_X3.crt -> to !mozilla/DST_Root_CA_X3.crt And then run update-ca-certificates command But in this case, the acme api doesn'…

Be very careful if you keep using cli.ini. I've only ever really found it useful for coordinating docker containers.

Please show the output of: echo | openssl s_client -connect letsencrypt.org:443 | head

Thank you. Very quick response from all of you and this saved my day! THank you very much

You're quite welcome. I'm just glad you were able to make such a bound so quickly. Most aren't so fortunate.

Urgent certbot does not update due DNS issue

Help

rg305 November 6, 2021, 7:37am 19

Anywho... this might also be useful:

But in this case, the acme api doesn't use the expired cert.
[fixing tomorrows problems today - LOL]

Topic		Replies	Views
Update to ACMEv2 and point to right infos to renew certs Help	6	1565	November 29, 2021
Update your client software to continue using Let's Encrypt Help	6	926	May 14, 2020
Manual certificate renewal failing - DNS challenge Help	5	1634	August 14, 2021
Certbot renew failed Help	10	2425	January 14, 2022
Impossible to renew certificate with certbot 0.10.2-1 Help	4	788	July 22, 2022

Urgent certbot does not update due DNS issue

Related topics