SSL Certificate Renew Fails

hackernewbie 2019-02-13 09:20:30 UTC #1

Keywords: WordPress - AWS - Technical issue - Secure Connections (SSL/HTTPS)
Description:
Hello everyone,

I was trying to renew my ssl certificates for a domain before putting them in a script which will automatically check and renew the certs when required.

I was following the procedure listed here - https://docs.bitnami.com/aws/how-to/generate-install-lets-encrypt-ssl/

After passing the following comands:

sudo /opt/bitnami/ctlscript.sh stop
sudo lego --tls --email="my_email" --domains="my_domain" --path="/etc/lego" renew
sudo /opt/bitnami/ctlscript.sh start

The error I get is the following:

Error while loading the certificate for domain www.northeastexplorers.in
open /etc/lego/certificates/www.northeastexplorers.in.crt: no such file or directory

I am not sure where I am going wrong.

Any help here would be great.

Thanks!

michiel 2019-02-13 10:55:15 UTC #2

Can you tell me the output of the following command:

ls -la /etc/lego/certificates/

Also, we have a Support Tool that will gather relevant information for us to analyze your configuration. Could you please download and execute it on the machine where the stack is running by following the steps described in the guide below?

How to Run the Bitnami Support Tool

Please note that you need to paste the code outputted by the tool in your reply.

hackernewbie 2019-02-14 08:40:05 UTC #3

The output is as follows: [I had to run the command as root (using sudo) else, the permission was being denied]

sudo ls -la /etc/lego/certificates/
total 8
drwx------ 2 root root 4096 Feb 12 10:02 .
drwx------ 4 root root 4096 Feb 12 10:02 ..

I tried running the tool for another issue a couple of days back and it seemed to take forever to complete. Ultimately I had to kill it.

Please let me know if my input above is not conclusive enough, I will re-run the tool and do as per your suggestions.

Also, here is the output of the opt/bitnami/letsencrypt/certificates folder

/opt/bitnami/letsencrypt/certificates$ ls
northeastexplorers.in.crt northeastexplorers.in.key www.northeastexplorers.in.json
northeastexplorers.in.issuer.crt www.northeastexplorers.in.crt www.northeastexplorers.in.key
northeastexplorers.in.json www.northeastexplorers.in.issuer.crt

Thanks.

michiel 2019-02-14 10:48:29 UTC #4

Can you try changing the path in the lego command:

sudo lego --tls --email="my_email" --domains="my_domain" --path="/opt/bitnami/letsencrypt/lego" renew

Please, click on if you think my answer was helpful

hackernewbie 2019-02-14 11:01:55 UTC #5

Hi Michiel,

I tried this as suggested by you:

$ sudo lego --tls --email="rajiv@myemail" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/lego" renew

But, no luck yet. Here's the response:

Could not load RSA private key from file /opt/bitnami/letsencrypt/lego/accounts/acme-v02.api.letsencrypt.org/rajiv@myemail/keys/rajiv@myemail.key: open /opt/bitnami/letsencrypt/lego/accounts/acme-v02.api.letsencrypt.org/rajiv@myemail/keys/rajiv@myemail.key: not a directory

Thanks

hackernewbie 2019-02-15 07:57:17 UTC #6

Guys,

Any pointers or help here please?

michiel 2019-02-15 11:25:59 UTC #7

We have a Support Tool that will gather relevant information for us to analyze your configuration. Could you please download and execute it on the machine where the stack is running by following the steps described in the guide below?

How to Run the Bitnami Support Tool

Please note that you need to paste the code outputted by the tool in your reply.

hackernewbie 2019-02-17 11:13:12 UTC #8

Here's the code : 6b27e595-d393-5f0d-4095-4fc4eb1934b4

michiel 2019-02-18 11:18:27 UTC #9

Hi @hackernewbie,

The command I shared with you was wrong. The path should be /opt/bitnami/letsencrypt. Your folder should look like this:

/opt/bitnami/letsencrypt
├── certificates
│   ├── yourdomain.crt
│   └── yourdomain.key
└── lego

You need to run the following command:

sudo lego --tls --email="my_email" --domains="my_domain" --path="/opt/bitnami/letsencrypt/" renew

Please, click on if you think my answer was helpful

hackernewbie 2019-02-18 15:51:26 UTC #10

sudo lego --tls --email="my-email-id" --domains="www.northeastexplorers.in" --path="/opt/bitnami/letsencrypt/" renew
$ ls /opt/bitnami/letsencrypt/
accounts certificates lego scripts
$ cd certificates
-bash: cd: certificates: No such file or directory

I don't see anything inside my certificates directory, strangely!

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!