Bug #3420

Let's Encrypt: certificates not renewed

Added by Giacomo Sanchietti over 3 years ago. Updated over 3 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:letsencrypt
Target version:v6.8
Security class: Resolution:
Affected version:v6.8 NEEDINFO:No

Description

Let's Encrypt certificates can't be renewed, since LE server has changed the agreement URL.

Output from LE script:

/usr/libexec/nethserver/letsencrypt-certs -v -t
/usr/sbin/letsencrypt.sh --cron  --config /tmp/ynhSBvc99S/config.sh  -d mail.akmecorporate.it
# INFO: Using main config file /tmp/ynhSBvc99S/config.sh
+ Generating account key...
+ Registering account key with letsencrypt...
  + ERROR: An error occurred while sending post-request to https://acme-staging.api.letsencrypt.org/acme/new-reg (Status 400)

Details:
{
  "type": "urn:acme:error:malformed",
  "detail": "Provided agreement URL [https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf] does not match current agreement URL [https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf]",
  "status": 400
}rm: cannot remove `/tmp/ynhSBvc99S/domains.txt': No such file or directory

Upstream bug:
https://github.com/lukas2511/letsencrypt.sh/issues/248

Thanks to Massimo Palazzetti for reporting it.


Related issues

Copied from NethServer 6 - Bug #3399: Let's Encrypt: certificates not renewed CLOSED

History

#1 Updated by Giacomo Sanchietti over 3 years ago

  • Copied from Bug #3399: Let's Encrypt: certificates not renewed added

#2 Updated by Giacomo Sanchietti over 3 years ago

  • Description updated (diff)

#3 Updated by Giacomo Sanchietti over 3 years ago

  • Status changed from NEW to TRIAGED
  • % Done changed from 0 to 20

#4 Updated by Giacomo Sanchietti over 3 years ago

  • Status changed from TRIAGED to ON_DEV
  • Assignee set to Giacomo Sanchietti
  • % Done changed from 20 to 30

#5 Updated by Giacomo Sanchietti over 3 years ago

  • Status changed from ON_DEV to MODIFIED
  • % Done changed from 30 to 60

Merged upstream updates.

#6 Updated by Giacomo Sanchietti over 3 years ago

  • Status changed from MODIFIED to ON_QA
  • Assignee deleted (Giacomo Sanchietti)
  • % Done changed from 60 to 70
In nethserver-testing:
  • letsencrypt.sh-1.0.0-1.20.g70db2e2.ns6.noarch.rpm

Test case

- Check the bug is not reproducibile

#7 Updated by Giacomo Sanchietti over 3 years ago

  • Status changed from ON_QA to VERIFIED
  • % Done changed from 70 to 90

#8 Updated by Giacomo Sanchietti over 3 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100
Released:
  • letsencrypt.sh-1.0.1-1.ns6.noarch.rpm
  • letsencrypt.sh-1.0.2-1.ns6.noarch.rpm

Also available in: Atom PDF