My domain is: I ran this command: certbot renewal And dig @8.8.8.8 acme-v1.letsencrypt.org (from several servers) It produced this output: Attempting to renew cert (xxxx) from /etc/letsencrypt/renewal/nwh.c Xxxx.de.conf produced an unexpected error: ("bad handshake: Error([('SSL ro utines', …

[image] rg305: Change that to v2. These have no A records: acme-v1.api.letsencrypt.org acme-v2.api.letsencrypt.org acme-v01.api.letsencrypt.org This does: acme-v02.api.letsencrypt.org

I think the same with DST Root CA X3 expiration. How can I resolve this?

That's where @rg305 is headed. He has been the master of solving such here. :grin:

[image] ole1986: How can I resolve this? [image] rg305: You may need to update your ca-certificates

acme-v02.api.letsencrypt.org is reachable and seem to work. Anyway I have updated to certbot 1.21. and it just worked well, too So it seems that certbot 1.21 does not use the cli.ini located in /etc/letsencrypt/ anymore? UPDATE: certbot 1.21 uses the cli.ini. And during the installation it has co…

https://certbot.eff.org/docs/using.html#configuration-file

Anywho... this might also be useful: [image] DST Root CA X3 expiry countdown Looks like a workaround for now is changing /etc/ca-certificates.conf : mozilla/DST_Root_CA_X3.crt -> to !mozilla/DST_Root_CA_X3.crt And then run update-ca-certificates command But in this case, the acme api doesn'…

Be very careful if you keep using cli.ini. I've only ever really found it useful for coordinating docker containers.

Please show the output of: echo | openssl s_client -connect letsencrypt.org:443 | head

Thank you. Very quick response from all of you and this saved my day! THank you very much

You're quite welcome. I'm just glad you were able to make such a bound so quickly. Most aren't so fortunate.

Urgent certbot does not update due DNS issue

Help

griffin November 6, 2021, 7:44am 27

Long chain verified.

Topic		Replies	Views
Update to ACMEv2 and point to right infos to renew certs Help	5	1609	October 30, 2021
Update your client software to continue using Let's Encrypt Help	5	968	April 14, 2020
Manual certificate renewal failing - DNS challenge Help	4	1656	July 15, 2021
Certbot renew failed Help	9	2525	December 15, 2021
Impossible to renew certificate with certbot 0.10.2-1 Help	3	811	June 22, 2022

Urgent certbot does not update due DNS issue

Related topics