SSL renewal error

ℹ️ Support 📦 Appliances (Docker, Snappy, VM, NCP, AIO)
, ,
1

Hi,

I have following problem with NextCloudPi:

Nextcloud version: 20.0.8.1
NextCloudPi version: v1.35.0

The issue you are facing:
My NCP config runs quite well since mid of last year. I only have the issue that the automatic renewal function for the letsencrypt SSL certificate does not work. A manual update is possible, if I just start the letsencrypt tool in NCP again. So this is ok as a temporary workaround. If I remeber correctly, the problem occured after I reinstalled NCP and restored a backup.

Error message in the web interface is:

SSL renewal error
SSL certificate renewal failed. See /var/log/letsencrypt/letsencrypt.log

letsencrypt.log shows following information

2021-04-11 06:21:58,851:DEBUG:certbot.main:certbot version: 0.31.0
2021-04-11 06:21:58,854:DEBUG:certbot.main:Arguments: [‘-q’]
2021-04-11 06:21:58,854:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2021-04-11 06:21:58,876:DEBUG:certbot.log:Root logging level set at 30
2021-04-11 06:21:58,877:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2021-04-11 06:21:58,897:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0xb54d80b0> and installer <certbot.cli._Default object at 0xb54d80b0>
2021-04-11 06:21:58,915:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2020-08-02 13:06:22 UTC.
2021-04-11 06:21:58,915:INFO:certbot.renewal:Cert is due for renewal, auto-renewing…
2021-04-11 06:21:58,916:INFO:certbot.renewal:Non-interactive renewal: random delay of 90 seconds
2021-04-11 06:23:28,927:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
2021-04-11 06:23:28,929:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot

Via SSL Labs I tested my certificate. Following output:

|Valid from |Mon, 01 Mar 2021 12:26:50 UTC|
|Valid until |Sun, 30 May 2021 12:26:50 UTC (expires in 1 month and 17 days)|

So from timing perspective the certificate should have renewed.

Any ideas?

Best regards
Stefan

2

So not due for renewal yet, not for another 18 days.
Certs are valid for 90 days and auto renew after 61 days, afaik.

3

Ok, so maybe I need to wait.
But this does not explain the error message. And according to the web interface the cert will be renewed every month.

4

Same issue here !

5

You were right. The cert has been updated in the meantime.

Nevertheless I still get the error message. Strange thing is that only one user account receives these messages. I have 2 accounts and both are admin.

Further ideas?