SSL Certificate Renew Fails

michiel 2019-02-19 10:36:22 UTC #11

According to the bnsupport information the certificates are in that folder. Can you tell me the output of the following commands:

ls -lah /opt/bitnami/letsencrypt/certificates/

And

ls -lah /opt/bitnami/apache2/conf/

Please, click on if you think my answer was helpful

hackernewbie 2019-02-23 08:03:37 UTC #12

First Command's Response

total 40K
drwxr-xr-x 2 root root 4.0K Feb 12 13:41 .
drwxr-xr-x 5 root root 4.0K Feb 12 11:27 ..
-rw-r--r-- 1 root root 3.5K Feb 12 11:27 northeastexplorers.in.crt
-rw------- 1 root root 1.7K Feb 12 11:27 northeastexplorers.in.issuer.crt
-rw------- 1 root root 242 Feb 12 11:27 northeastexplorers.in.json
-rw-r--r-- 1 root root 1.7K Feb 12 11:27 northeastexplorers.in.key
-rw-r--r-- 1 root root 3.6K Feb 12 13:41 www.northeastexplorers.in.crt
-rw------- 1 root root 1.7K Feb 12 13:41 www.northeastexplorers.in.issuer.crt
-rw------- 1 root root 246 Feb 12 13:41 www.northeastexplorers.in.json
-rw-r--r-- 1 root root 1.7K Feb 12 13:41 www.northeastexplorers.in.key

Second command's Response:

total 328K
drwxr-xr-x 5 bitnami root 4.0K Feb 12 13:41 .
drwxr-xr-x 14 root root 4.0K Dec 21 17:44 ..
drwxr-xr-x 2 bitnami root 4.0K Feb 12 13:41 bitnami
-rw-r--r-- 1 bitnami root 289 Dec 21 17:45 deflate.conf
drwxr-xr-x 2 bitnami root 4.0K Dec 21 17:41 extra
-rw-r--r-- 1 bitnami root 20K Dec 21 17:48 httpd.conf
-rw-r--r-- 1 bitnami root 13K Dec 8 11:38 magic
-rw-r--r-- 1 bitnami root 60K Dec 8 11:38 mime.types
-rw-r--r-- 1 bitnami root 7.3K Aug 2 2012 modsecurity.conf
lrwxrwxrwx 1 root root 63 Feb 12 11:27 northeastexplorers.in.crt -> /opt/bitnami/letsencrypt/certificates/northeastexplorers.in.crt
lrwxrwxrwx 1 root root 63 Feb 12 11:27 northeastexplorers.in.key -> /opt/bitnami/letsencrypt/certificates/northeastexplorers.in.key
drwxr-xr-x 3 bitnami root 4.0K Dec 21 17:41 original
-rw-r--r-- 1 bitnami root 18K Dec 21 17:45 pagespeed.conf
-rw-r--r-- 1 bitnami root 138K Dec 21 17:41 pagespeed_libraries.conf
-rw-r--r-- 1 bitnami root 199 Dec 21 17:42 php-fpm-apache.conf
-rw-r--r-- 1 bitnami root 1.8K Feb 12 07:21 privkey.pem
-rw-r--r-- 1 root root 1.2K Feb 12 07:21 server.crt
-rw-r--r-- 1 root root 985 Feb 12 07:21 server.csr
-rw-r--r-- 1 root root 1.7K Feb 12 07:21 server.key
-rw-r--r-- 1 bitnami root 203 Dec 21 17:44 ssi.conf
lrwxrwxrwx 1 root root 67 Feb 12 13:41 www.northeastexplorers.in.crt -> /opt/bitnami/letsencrypt/certificates/www.northeastexplorers.in.crt
lrwxrwxrwx 1 root root 67 Feb 12 13:41 www.northeastexplorers.in.key -> /opt/bitnami/letsencrypt/certificates/www.northeastexplorers.in.key

michiel 2019-02-25 10:40:36 UTC #13

Could you execute the following command:

sudo /opt/bitnami/letsencrypt/lego --tls --email="my_email" --domains="my_domain" --path="/opt/bitnami/letsencrypt/" renew

Please, click on if you think my answer was helpful

hackernewbie 2019-02-27 15:47:51 UTC #14

Surprisingly, I get the following as response to the command given below:

Response:

You have to pass an account (email address) to the program using --email or -m

Command Executed

sudo /opt/bitnami/letsencrypt/lego --tls --email="myemail@mydomain.me" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/" renew

jsalmeron 2019-02-28 11:52:12 UTC #15

Hi,

This is weird, could you try using -m instead of --email ?

Best regards,

Javier J. Salmerón

Was my answer helpful? Click on

khaled 2019-02-28 13:19:59 UTC #16

Hello every one,

I Have same issue. I got same response
"You have to pass an account (email address) to the program using --email or -m"

and I try -m I receive same response

Best Regards
Khaled

michiel 2019-03-01 10:48:35 UTC #17

Hi @khaled,

Could you paste command you are using and the output?

khaled 2019-03-01 20:39:23 UTC #18

Hi Michiel, Thank you for your quick response

I use Bitnami WordPress with NGINX and SSL 4.9.8-2

Command Executed

sudo /opt/bitnami/ctlscript.sh stop

sudo /opt/bitnami/letsencrypt/lego --tls --email=qe.sa*****@gmail.com" --domains="www.qe*****.com" --path="/opt/bitnami/letsencrypt/" renew

sudo /opt/bitnami/ctlscript.sh start

Response:

2019/03/01 19:46:31 You have to pass an account (email address) to the program using --email or -m

Command Executed

ls -lah /opt/bitnami/letsencrypt/certificates/

Response:

total 40K
drwxr-xr-x 2 root root 4.0K Nov 29 04:58 .
drwxr-xr-x 5 root root 4.0K Feb 27 17:54 ..
-rw-r--r-- 1 root root 3.5K Mar 1 00:00 qe***.com.crt
-rw------- 1 root root 1.7K Mar 1 00:00 qe***.com.issuer.crt
-rw------- 1 root root 231 Mar 1 00:00 qe***.com.json
-rw-r--r-- 1 root root 1.7K Mar 1 00:00 qe***.com.key
-rw-r--r-- 1 root root 3.5K Feb 27 20:51 www_qe***com*crt
-rw------- 1 root root 1.7K Feb 27 20:51 www_qe***.com.issuer.crt
-rw------- 1 root root 235 Feb 27 20:51 www_qe***.com.json
-rw-r--r-- 1 root root 1.7K Feb 27 20:51 www_qe***.com.key

Command Executed

s -lah /opt/bitnami/nginx/conf/

Response:

total 108K
drwxr-xr-x 4 root root 4.0K Nov 29 04:59 .
drwxr-xr-x 9 root root 4.0K Nov 12 17:59 ..
drwxr-xr-x 2 root root 4.0K Nov 29 05:23 bitnami
-rw-r--r-- 1 root root 1.1K Nov 10 22:33 fastcgi.conf
-rw-r--r-- 1 root root 1.1K Nov 10 22:33 fastcgi.conf.default
-rw-r--r-- 1 root root 1.1K Nov 12 17:59 fastcgi_params
-rw-r--r-- 1 root root 1007 Nov 10 22:33 fastcgi_params.default
-rw-r--r-- 1 root root 2.8K Nov 10 22:33 koi-utf
-rw-r--r-- 1 root root 2.2K Nov 10 22:33 koi-win
-rw-r--r-- 1 root root 5.1K Nov 10 22:33 mime.types
-rw-r--r-- 1 root root 5.1K Nov 10 22:33 mime.types.default
-rw-r--r-- 1 root root 1.9K Nov 12 17:59 nginx.conf
-rw-r--r-- 1 root root 2.6K Nov 10 22:33 nginx.conf.default
-rw-r--r-- 1 root root 1.8K Nov 23 14:10 privkey.pem
lrwxrwxrwx 1 root root 52 Nov 29 04:59 qe***.com.crt -> /opt/bitnami/letsencrypt/certificates/qe***.com.crt
lrwxrwxrwx 1 root root 52 Nov 29 04:59 qe***.com.key -> /opt/bitnami/letsencrypt/certificates/qe***.com.key
-rw-r--r-- 1 root root 4.7K Nov 10 21:44 sample_domain_host.conf
-rw-r--r-- 1 root root 636 Nov 10 22:33 scgi_params
-rw-r--r-- 1 root root 636 Nov 10 22:33 scgi_params.default
-rw-r--r-- 1 root root 1.2K Nov 23 14:10 server.crt
-rw-r--r-- 1 root root 985 Nov 23 14:10 server.csr
-rw-r--r-- 1 root root 1.7K Nov 23 14:10 server.key
-rw-r--r-- 1 root root 664 Nov 10 22:33 uwsgi_params
-rw-r--r-- 1 root root 664 Nov 10 22:33 uwsgi_params.default
drwxr-xr-x 2 root root 4.0K Nov 12 17:59 vhosts
-rw-r--r-- 1 root root 3.6K Nov 10 22:33 win-utf
lrwxrwxrwx 1 root root 56 Nov 29 04:56 www_qe***.com.crt -> /opt/bitnami/letsencrypt/certificates/www_qe***.com.crt
lrwxrwxrwx 1 root root 56 Nov 29 04:56 www_qe***.com.key -> /opt/bitnami/letsencrypt/certificates/www.qe***.com.key

Best Regards
Khaled

khaled 2019-03-01 23:28:15 UTC #19

After that the website isn't working

HTTP ERROR 500

khaled 2019-03-03 00:08:11 UTC #20

I just increase the memory limit and every things is working also the ssl was renew.

Best Regards
khaled

hackernewbie 2019-03-05 08:57:57 UTC #21

Doing this returns the following:

You have to pass an account (email address) to the program using --email or -m

michiel 2019-03-05 11:00:30 UTC #22

Hi @hackernewbie,

Could you send a screenshot after running the command? Also, could you run the following command and tell me the output?

sudo /opt/bitnami/letsencrypt/lego --version

Please, click on if you think my answer was helpful

hackernewbie 2019-03-05 16:34:05 UTC #23

Hi Michiel,

The output of the following command:

sudo /opt/bitnami/letsencrypt/lego --tls --m="me@mydomain.me" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/" renew

is:

2019/03/05 16:30:03 You have to pass an account (email address) to the program using --email or -m

The following command:

sudo /opt/bitnami/letsencrypt/lego --version

gives the result given below:

lego version 1.2.1

However, if I run

lego help

it says I am running version 2.2.0 of Lego. The output is as follows:

NAME:
lego - Let's Encrypt client written in Go

USAGE:
lego [global options] command [command options] [arguments...]

VERSION:
2.2.0

michiel 2019-03-06 11:23:35 UTC #24

You are using --m, could you try running the command with --email:

sudo /opt/bitnami/letsencrypt/lego --tls --email="me@mydomain.me" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/" renew

Please, click on if you think my answer was helpful

hackernewbie 2019-03-07 18:30:37 UTC #25

Hi Michiel,

If you see our conversation above, you will see that is exactly what I had done above. I have also shared the response above.

Sharing the command and the response here again:

sudo /opt/bitnami/letsencrypt/lego --tls --email="rajiv@myemail.me" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/" renew

Response

2019/03/07 18:29:40 You have to pass an account (email address) to the program using --email or -m

Can you help me sort this out sooner please, as the certificate will need renewal soon.

jota 2019-03-08 14:38:19 UTC #26

Hi @hackernewbie,

It seems that you have 2 different lego files in your machine. The first one is at /opt/bitnami/letsencrypt/lego and it includes the version 1.2.1 and the other one is in the system's paths and its version is 2.2.0. The --tls option is not available in the version 1.2.1 so you can either run the lego binary inside /opt/bitnami without using the --tls option or use the system's lego to regenerate the certificate.

Option 1:

sudo /opt/bitnami/letsencrypt/lego --email="rajiv@myemail.me" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/" renew

Option 2:

sudo lego --tls --email="rajiv@myemail.me" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/" renew

Let us know if you have any questions

Let's encrypt certificate renewal

I can't renew the LE certificate because it says it is already a valid one

hackernewbie 2019-03-13 06:09:11 UTC #27

Thanks Jota,

I tried the first suggestion and it worked smoothly.

I however, don't know why do I have 2 versions of lego on my system.

Is it ok to have both the versions or should I have just one?

Thanks again!

michiel 2019-03-13 10:08:29 UTC #28

Hi @hackernewbie,

I'm glad to hear it works now. Keeping both versions doesn't matter, but you can safely remove the old one.

Please, click on if you think my answer was helpful

hackernewbie 2019-03-13 10:37:10 UTC #29

Thank you for your inputs.

system 2019-03-27 10:37:17 UTC #30

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!