Let's Encrypt: Error creating new cert :: authorizations for these names not found or expired

Submitted by btafoya on Wed, 07/12/2017 - 11:27

Every domain on my server is failing new requests and updates....

Here is a sample of the error:

Requesting a certificate for somedomain.com, www.somedomain.com from Let's Encrypt .. .. request failed : Failed to request certificate : Parsing account key... Parsing CSR... Registering account... Already registered! Verifying www.somedomain.com... Wrote file to /home/somedomain.com/public_html/.well-known/acme-challenge/QgKEH3XCb393qazkzQrgLCFxfABW5Y2gIXVa9-KLO-U, but couldn't download http://www.somedomain.com/.well-known/acme-challenge/QgKEH3XCb393qazkzQr... www.somedomain.com verified! Signing certificate... Traceback (most recent call last): File "/usr/share/webmin/webmin/acme_tiny.py", line 235, in main(sys.argv[1:]) File "/usr/share/webmin/webmin/acme_tiny.py", line 231, in main signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, args.dns_hook, args.cleanup_hook, log=LOGGER, CA=args.ca) File "/usr/share/webmin/webmin/acme_tiny.py", line 196, in get_crt raise ValueError("Error signing certificate: {0} {1}".format(code, result)) ValueError: Error signing certificate: 403 { "type": "urn:acme:error:unauthorized", "detail": "Error creating new cert :: authorizations for these names not found or expired: somedomain.com", "status": 403 }

Status: 
Active

Comments

Submitted by btafoya on Wed, 07/12/2017 - 11:28

Title: Error creating new cert :: authorizations for these names not found or expired ยป Let's Encrypt: Error creating new cert :: authorizations for these names not found or expired

Submitted by btafoya on Wed, 07/12/2017 - 11:29

Updated the title to show it is Let's Encrypt related. :)

Submitted by cognosco on Wed, 07/12/2017 - 15:03

I have got the same issue. Debian 9 , Virtualmin 6

Submitted by spanmo on Wed, 07/12/2017 - 16:20

this is due to a bug in acme-tiny. package is updated already. short-term fix: update line 81 in /usr/share/webmin/webmin/acme_tiny.py:

common_name = re.search(r"Subject:.*? CN ?= ?([^\s,;/]+)", out.decode('utf8'))

(via https://github.com/diafygi/acme-tiny/issues/167)

Submitted by btafoya on Wed, 07/12/2017 - 16:28

I can confirm, this resolves the issue. Thanks!

Submitted by JamieCameron on Wed, 07/12/2017 - 23:12

This fix will be in the next webmin release.

Submitted by cognosco on Thu, 07/13/2017 - 15:30

Thanks for the solution!

And also thanks for this nice piece of software and the updates/fixes :)