SSL renewal error

Hi,

I have following problem with NextCloudPi:

Nextcloud version: 20.0.8.1
NextCloudPi version: v1.35.0

The issue you are facing:
My NCP config runs quite well since mid of last year. I only have the issue that the automatic renewal function for the letsencrypt SSL certificate does not work. A manual update is possible, if I just start the letsencrypt tool in NCP again. So this is ok as a temporary workaround. If I remeber correctly, the problem occured after I reinstalled NCP and restored a backup.

Error message in the web interface is:

SSL renewal error
SSL certificate renewal failed. See /var/log/letsencrypt/letsencrypt.log

letsencrypt.log shows following information

2021-04-11 06:21:58,851:DEBUG:certbot.main:certbot version: 0.31.0
2021-04-11 06:21:58,854:DEBUG:certbot.main:Arguments: [’-q’]
2021-04-11 06:21:58,854:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2021-04-11 06:21:58,876:DEBUG:certbot.log:Root logging level set at 30
2021-04-11 06:21:58,877:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2021-04-11 06:21:58,897:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0xb54d80b0> and installer <certbot.cli._Default object at 0xb54d80b0>
2021-04-11 06:21:58,915:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2020-08-02 13:06:22 UTC.
2021-04-11 06:21:58,915:INFO:certbot.renewal:Cert is due for renewal, auto-renewing…
2021-04-11 06:21:58,916:INFO:certbot.renewal:Non-interactive renewal: random delay of 90 seconds
2021-04-11 06:23:28,927:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
2021-04-11 06:23:28,929:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot

Via SSL Labs I tested my certificate. Following output:

|Valid from |Mon, 01 Mar 2021 12:26:50 UTC|
|Valid until |Sun, 30 May 2021 12:26:50 UTC (expires in 1 month and 17 days)|

So from timing perspective the certificate should have renewed.

Any ideas?

Best regards
Stefan

So not due for renewal yet, not for another 18 days.
Certs are valid for 90 days and auto renew after 61 days, afaik.

Ok, so maybe I need to wait.
But this does not explain the error message. And according to the web interface the cert will be renewed every month.

Same issue here !

You were right. The cert has been updated in the meantime.

Nevertheless I still get the error message. Strange thing is that only one user account receives these messages. I have 2 accounts and both are admin.

Further ideas?