lets encrypt cerficates aren't renewed

Submitted by stretch on Tue, 01/24/2017 - 11:58

Hi, Today I have noticed that lets encrypt certificates for my domains weren't renewed automatically, I tried to request the renewal manually but it didn't work as well, when I press "Only update renewal" button it just loads the "Current certificate" page without renewing it. "Request certficate" works well. Renewal doesn't work both for expired and for still current certificates.

I checked for a cron job responsible for renewing and have found only /etc/webmin/package-updates/update.pl daily cron job. My Webmin version is 1.831 and Virtualmin version is 5.05.

Status: 
Closed (fixed)

Comments

Submitted by JamieCameron on Wed, 01/25/2017 - 01:56

If you renewal manually, do you get an error message? And if so, what is it?

Submitted by stretch on Wed, 01/25/2017 - 06:31

If you renewal manually, do you get an error message? And if so, what is it?

No error message at all, I tried doing this on two different virtualmin installations.

->I tried to request the renewal manually but it didn't work as well, when I press "Only update renewal" button it just loads the "Current certificate" page without renewing it.

Submitted by JamieCameron on Wed, 01/25/2017 - 23:58

The "Only update renewal" button just updates the number of months before automatic renewal will happen. What if you click the other button, to re-request a cert?

Submitted by stretch on Thu, 01/26/2017 - 01:54

Certificate re-request works. But why didn't automatic renewal happen?

Submitted by clockwork on Thu, 01/26/2017 - 06:32

You sure that you don't have manual renewal set ?

Submitted by stretch on Thu, 01/26/2017 - 13:38

I have "Months between automatic renewal" set to 1.

Submitted by JamieCameron on Thu, 01/26/2017 - 19:13

Hmmm ... did you get an email to root about automatic renewal failing?

Submitted by stretch on Sat, 01/28/2017 - 08:35

Hmmm ... did you get an email to root about automatic renewal failing?

No, I cannot find error message in logs as well

Submitted by JamieCameron on Mon, 01/30/2017 - 01:43

What if you go to Webmin -> Webmin Configuration -> Webmin Scheduled Functions , check the box next to "renew_letsencrypt_cert" and click Run Selected Functions Now?

Submitted by stretch on Tue, 01/31/2017 - 06:20

What if you go to Webmin -> Webmin Configuration -> Webmin Scheduled Functions , check the box next to "renew_letsencrypt_cert" and click Run Selected Functions Now?

Here's it, there's no such scheduled task! Why hasn't it been created and how can I create it?

Submitted by JamieCameron on Tue, 01/31/2017 - 15:27

On which page did you originally setup Let's Encrypt and automatic renewal?

Submitted by stretch on Thu, 02/02/2017 - 07:07

On which page did you originally setup Let's Encrypt and automatic renewal?

On the "Manage SSL Certificate"->"Let's encrypt" page. As I remember it has been rolled out with one of the updates last spring.

Submitted by stretch on Fri, 02/03/2017 - 06:24

Any ideas how can I assist in resolving the issue? When is the lets encrypt certificate update scheduled task created?

Submitted by gnilebein on Fri, 02/03/2017 - 09:58

I have the same issue. The scheduled Task is also missing in my setup:

Ubuntu 16.04 with nginx.

Submitted by uinfor on Mon, 02/06/2017 - 03:43 Pro Licensee

I not have too this scheduled task, and fresclam not have scheduled task too

Webmin module       Function name       Parameters      Run at   
Scheduled Cron Jobs cleanup_temp_files

Every 3600 seconds System Status scheduled_collect_system_info
Every 300 seconds Virtualmin Virtual Servers run_cron_script backup.pl --id 14835470861061 Every day at 7:00

Virtualmin Virtual Servers  run_cron_script bw.pl   Every hour at 0 past the hour

Virtualmin Virtual Servers  run_cron_script collectinfo.pl  At cron time 2,7,12,17,22,27,32,37,42,47,52,57 * * * *

Virtualmin Virtual Servers  run_cron_script fcgiclear.pl    Every hour at 0 past the hour

Virtualmin Virtual Servers  run_cron_script licence.pl  Every day at 2:42

Virtualmin Virtual Servers  run_cron_script scriptlatest.pl Every day at 0:02

Virtualmin Virtual Servers  run_cron_script sendratings.pl  Every day at 8:35

Virtualmin Virtual Servers  run_cron_script spamclear.pl    Every day at 0:30

Virtualmin Virtual Servers  run_cron_script spamconfig.pl   Every hour at 48 past the hour

Submitted by JamieCameron on Mon, 02/06/2017 - 19:24

Note that if you setup Let's Encrypt renewal in Virtualmin (at Server Configuration -> Manage SSL Certificate -> Let's Encrypt), then it is the collectinfo.pl script that will do the renewal.

Submitted by stretch on Wed, 02/08/2017 - 07:36

Virtualmin Virtual Servers (GPL) run_cron_script collectinfo.pl At cron time 0,5,10,15,20,25,30,35,40,45,50,55 * * * * I have this task, I tried running it manually, it finishes without outputting any log.

@JamieCameron Any hope that auto update will be fixed? I've found another issue https://www.virtualmin.com/node/45505 where this is described, and there you have said that it will be fixed in the 5.05 release.

Submitted by stretch on Thu, 03/02/2017 - 02:46

domains are still not renewed automatically in nginx setup(even with fix on line 2148 which fixes only manual renewal)

Submitted by JamieCameron on Thu, 03/02/2017 - 22:26

Have you upgraded to 5.06-2 ? Because that contains further fixes..

Submitted by stretch on Sun, 09/24/2017 - 10:54

Status: Active ยป Closed (fixed)