SSL Certificate Renew Fails

hackernewbie 2019-02-13 09:20:30 UTC #1

Keywords: WordPress - AWS - Technical issue - Secure Connections (SSL/HTTPS)
Description:
Hello everyone,

I was trying to renew my ssl certificates for a domain before putting them in a script which will automatically check and renew the certs when required.

I was following the procedure listed here - https://docs.bitnami.com/aws/how-to/generate-install-lets-encrypt-ssl/

After passing the following comands:

sudo /opt/bitnami/ctlscript.sh stop
sudo lego --tls --email="my_email" --domains="my_domain" --path="/etc/lego" renew
sudo /opt/bitnami/ctlscript.sh start

The error I get is the following:

Error while loading the certificate for domain www.northeastexplorers.in
open /etc/lego/certificates/www.northeastexplorers.in.crt: no such file or directory

I am not sure where I am going wrong.

Any help here would be great.

Thanks!

michiel 2019-02-13 10:55:15 UTC #2

Can you tell me the output of the following command:

ls -la /etc/lego/certificates/

Also, we have a Support Tool that will gather relevant information for us to analyze your configuration. Could you please download and execute it on the machine where the stack is running by following the steps described in the guide below?

How to Run the Bitnami Support Tool

Please note that you need to paste the code outputted by the tool in your reply.

hackernewbie 2019-02-14 08:40:05 UTC #3

The output is as follows: [I had to run the command as root (using sudo) else, the permission was being denied]

sudo ls -la /etc/lego/certificates/
total 8
drwx------ 2 root root 4096 Feb 12 10:02 .
drwx------ 4 root root 4096 Feb 12 10:02 ..

I tried running the tool for another issue a couple of days back and it seemed to take forever to complete. Ultimately I had to kill it.

Please let me know if my input above is not conclusive enough, I will re-run the tool and do as per your suggestions.

Also, here is the output of the opt/bitnami/letsencrypt/certificates folder

/opt/bitnami/letsencrypt/certificates$ ls
northeastexplorers.in.crt northeastexplorers.in.key www.northeastexplorers.in.json
northeastexplorers.in.issuer.crt www.northeastexplorers.in.crt www.northeastexplorers.in.key
northeastexplorers.in.json www.northeastexplorers.in.issuer.crt

Thanks.

michiel 2019-02-14 10:48:29 UTC #4

Can you try changing the path in the lego command:

sudo lego --tls --email="my_email" --domains="my_domain" --path="/opt/bitnami/letsencrypt/lego" renew

Please, click on if you think my answer was helpful

hackernewbie 2019-02-14 11:01:55 UTC #5

Hi Michiel,

I tried this as suggested by you:

$ sudo lego --tls --email="rajiv@myemail" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/lego" renew

But, no luck yet. Here's the response:

Could not load RSA private key from file /opt/bitnami/letsencrypt/lego/accounts/acme-v02.api.letsencrypt.org/rajiv@myemail/keys/rajiv@myemail.key: open /opt/bitnami/letsencrypt/lego/accounts/acme-v02.api.letsencrypt.org/rajiv@myemail/keys/rajiv@myemail.key: not a directory

Thanks

hackernewbie 2019-02-15 07:57:17 UTC #6

Guys,

Any pointers or help here please?

michiel 2019-02-15 11:25:59 UTC #7

We have a Support Tool that will gather relevant information for us to analyze your configuration. Could you please download and execute it on the machine where the stack is running by following the steps described in the guide below?

How to Run the Bitnami Support Tool

Please note that you need to paste the code outputted by the tool in your reply.

hackernewbie 2019-02-17 11:13:12 UTC #8

Here's the code : 6b27e595-d393-5f0d-4095-4fc4eb1934b4

michiel 2019-02-18 11:18:27 UTC #9

Hi @hackernewbie,

The command I shared with you was wrong. The path should be /opt/bitnami/letsencrypt. Your folder should look like this:

/opt/bitnami/letsencrypt
├── certificates
│   ├── yourdomain.crt
│   └── yourdomain.key
└── lego

You need to run the following command:

sudo lego --tls --email="my_email" --domains="my_domain" --path="/opt/bitnami/letsencrypt/" renew

Please, click on if you think my answer was helpful

hackernewbie 2019-02-18 15:51:26 UTC #10

sudo lego --tls --email="my-email-id" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/" renew
$ ls /opt/bitnami/letsencrypt/
accounts certificates lego scripts
$ cd certificates
-bash: cd: certificates: No such file or directory

I don't see anything inside my certificates directory, strangely!

michiel 2019-02-19 10:36:22 UTC #11

According to the bnsupport information the certificates are in that folder. Can you tell me the output of the following commands:

ls -lah /opt/bitnami/letsencrypt/certificates/

And

ls -lah /opt/bitnami/apache2/conf/

Please, click on if you think my answer was helpful

hackernewbie 2019-02-23 08:03:37 UTC #12

First Command's Response

total 40K
drwxr-xr-x 2 root root 4.0K Feb 12 13:41 .
drwxr-xr-x 5 root root 4.0K Feb 12 11:27 ..
-rw-r--r-- 1 root root 3.5K Feb 12 11:27 northeastexplorers.in.crt
-rw------- 1 root root 1.7K Feb 12 11:27 northeastexplorers.in.issuer.crt
-rw------- 1 root root 242 Feb 12 11:27 northeastexplorers.in.json
-rw-r--r-- 1 root root 1.7K Feb 12 11:27 northeastexplorers.in.key
-rw-r--r-- 1 root root 3.6K Feb 12 13:41 www.northeastexplorers.in.crt
-rw------- 1 root root 1.7K Feb 12 13:41 www.northeastexplorers.in.issuer.crt
-rw------- 1 root root 246 Feb 12 13:41 www.northeastexplorers.in.json
-rw-r--r-- 1 root root 1.7K Feb 12 13:41 www.northeastexplorers.in.key

Second command's Response:

total 328K
drwxr-xr-x 5 bitnami root 4.0K Feb 12 13:41 .
drwxr-xr-x 14 root root 4.0K Dec 21 17:44 ..
drwxr-xr-x 2 bitnami root 4.0K Feb 12 13:41 bitnami
-rw-r--r-- 1 bitnami root 289 Dec 21 17:45 deflate.conf
drwxr-xr-x 2 bitnami root 4.0K Dec 21 17:41 extra
-rw-r--r-- 1 bitnami root 20K Dec 21 17:48 httpd.conf
-rw-r--r-- 1 bitnami root 13K Dec 8 11:38 magic
-rw-r--r-- 1 bitnami root 60K Dec 8 11:38 mime.types
-rw-r--r-- 1 bitnami root 7.3K Aug 2 2012 modsecurity.conf
lrwxrwxrwx 1 root root 63 Feb 12 11:27 northeastexplorers.in.crt -> /opt/bitnami/letsencrypt/certificates/northeastexplorers.in.crt
lrwxrwxrwx 1 root root 63 Feb 12 11:27 northeastexplorers.in.key -> /opt/bitnami/letsencrypt/certificates/northeastexplorers.in.key
drwxr-xr-x 3 bitnami root 4.0K Dec 21 17:41 original
-rw-r--r-- 1 bitnami root 18K Dec 21 17:45 pagespeed.conf
-rw-r--r-- 1 bitnami root 138K Dec 21 17:41 pagespeed_libraries.conf
-rw-r--r-- 1 bitnami root 199 Dec 21 17:42 php-fpm-apache.conf
-rw-r--r-- 1 bitnami root 1.8K Feb 12 07:21 privkey.pem
-rw-r--r-- 1 root root 1.2K Feb 12 07:21 server.crt
-rw-r--r-- 1 root root 985 Feb 12 07:21 server.csr
-rw-r--r-- 1 root root 1.7K Feb 12 07:21 server.key
-rw-r--r-- 1 bitnami root 203 Dec 21 17:44 ssi.conf
lrwxrwxrwx 1 root root 67 Feb 12 13:41 www.northeastexplorers.in.crt -> /opt/bitnami/letsencrypt/certificates/www.northeastexplorers.in.crt
lrwxrwxrwx 1 root root 67 Feb 12 13:41 www.northeastexplorers.in.key -> /opt/bitnami/letsencrypt/certificates/www.northeastexplorers.in.key

michiel 2019-02-25 10:40:36 UTC #13

Could you execute the following command:

sudo /opt/bitnami/letsencrypt/lego --tls --email="my_email" --domains="my_domain" --path="/opt/bitnami/letsencrypt/" renew

Please, click on if you think my answer was helpful

hackernewbie 2019-02-27 15:47:51 UTC #14

Surprisingly, I get the following as response to the command given below:

Response:

You have to pass an account (email address) to the program using --email or -m

Command Executed

sudo /opt/bitnami/letsencrypt/lego --tls --email="myemail@mydomain.me" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/" renew

jsalmeron 2019-02-28 11:52:12 UTC #15

Hi,

This is weird, could you try using -m instead of --email ?

Best regards,

Javier J. Salmerón

Was my answer helpful? Click on

khaled 2019-02-28 13:19:59 UTC #16

Hello every one,

I Have same issue. I got same response
"You have to pass an account (email address) to the program using --email or -m"

and I try -m I receive same response

Best Regards
Khaled

michiel 2019-03-01 10:48:35 UTC #17

Hi @khaled,

Could you paste command you are using and the output?

khaled 2019-03-01 20:39:23 UTC #18

Hi Michiel, Thank you for your quick response

I use Bitnami WordPress with NGINX and SSL 4.9.8-2

Command Executed

sudo /opt/bitnami/ctlscript.sh stop

sudo /opt/bitnami/letsencrypt/lego --tls --email=qe.sa*****@gmail.com" --domains="www.qe*****.com" --path="/opt/bitnami/letsencrypt/" renew

sudo /opt/bitnami/ctlscript.sh start

Response:

2019/03/01 19:46:31 You have to pass an account (email address) to the program using --email or -m

Command Executed

ls -lah /opt/bitnami/letsencrypt/certificates/

Response:

total 40K
drwxr-xr-x 2 root root 4.0K Nov 29 04:58 .
drwxr-xr-x 5 root root 4.0K Feb 27 17:54 ..
-rw-r--r-- 1 root root 3.5K Mar 1 00:00 qe***.com.crt
-rw------- 1 root root 1.7K Mar 1 00:00 qe***.com.issuer.crt
-rw------- 1 root root 231 Mar 1 00:00 qe***.com.json
-rw-r--r-- 1 root root 1.7K Mar 1 00:00 qe***.com.key
-rw-r--r-- 1 root root 3.5K Feb 27 20:51 www_qe***com*crt
-rw------- 1 root root 1.7K Feb 27 20:51 www_qe***.com.issuer.crt
-rw------- 1 root root 235 Feb 27 20:51 www_qe***.com.json
-rw-r--r-- 1 root root 1.7K Feb 27 20:51 www_qe***.com.key

Command Executed

s -lah /opt/bitnami/nginx/conf/

Response:

total 108K
drwxr-xr-x 4 root root 4.0K Nov 29 04:59 .
drwxr-xr-x 9 root root 4.0K Nov 12 17:59 ..
drwxr-xr-x 2 root root 4.0K Nov 29 05:23 bitnami
-rw-r--r-- 1 root root 1.1K Nov 10 22:33 fastcgi.conf
-rw-r--r-- 1 root root 1.1K Nov 10 22:33 fastcgi.conf.default
-rw-r--r-- 1 root root 1.1K Nov 12 17:59 fastcgi_params
-rw-r--r-- 1 root root 1007 Nov 10 22:33 fastcgi_params.default
-rw-r--r-- 1 root root 2.8K Nov 10 22:33 koi-utf
-rw-r--r-- 1 root root 2.2K Nov 10 22:33 koi-win
-rw-r--r-- 1 root root 5.1K Nov 10 22:33 mime.types
-rw-r--r-- 1 root root 5.1K Nov 10 22:33 mime.types.default
-rw-r--r-- 1 root root 1.9K Nov 12 17:59 nginx.conf
-rw-r--r-- 1 root root 2.6K Nov 10 22:33 nginx.conf.default
-rw-r--r-- 1 root root 1.8K Nov 23 14:10 privkey.pem
lrwxrwxrwx 1 root root 52 Nov 29 04:59 qe***.com.crt -> /opt/bitnami/letsencrypt/certificates/qe***.com.crt
lrwxrwxrwx 1 root root 52 Nov 29 04:59 qe***.com.key -> /opt/bitnami/letsencrypt/certificates/qe***.com.key
-rw-r--r-- 1 root root 4.7K Nov 10 21:44 sample_domain_host.conf
-rw-r--r-- 1 root root 636 Nov 10 22:33 scgi_params
-rw-r--r-- 1 root root 636 Nov 10 22:33 scgi_params.default
-rw-r--r-- 1 root root 1.2K Nov 23 14:10 server.crt
-rw-r--r-- 1 root root 985 Nov 23 14:10 server.csr
-rw-r--r-- 1 root root 1.7K Nov 23 14:10 server.key
-rw-r--r-- 1 root root 664 Nov 10 22:33 uwsgi_params
-rw-r--r-- 1 root root 664 Nov 10 22:33 uwsgi_params.default
drwxr-xr-x 2 root root 4.0K Nov 12 17:59 vhosts
-rw-r--r-- 1 root root 3.6K Nov 10 22:33 win-utf
lrwxrwxrwx 1 root root 56 Nov 29 04:56 www_qe***.com.crt -> /opt/bitnami/letsencrypt/certificates/www_qe***.com.crt
lrwxrwxrwx 1 root root 56 Nov 29 04:56 www_qe***.com.key -> /opt/bitnami/letsencrypt/certificates/www.qe***.com.key

Best Regards
Khaled

khaled 2019-03-01 23:28:15 UTC #19

After that the website isn't working

HTTP ERROR 500

khaled 2019-03-03 00:08:11 UTC #20

I just increase the memory limit and every things is working also the ssl was renew.

Best Regards
khaled

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!