I tried to renew the certificate of my server. The current one has expired 1 month ago, but I didn't took care of it until now.
I tried to use the
letsencrypt-auto renew command but got a failure:
Note: I changed the domain/user/server names.
user@vps:~/letsencrypt# ./letsencrypt-auto renew Updating letsencrypt and virtual environment dependencies....... Running with virtualenv: sudo /home/user/.local/share/letsencrypt/bin/letsencrypt renew Processing /etc/letsencrypt/renewal/www.example.com.conf 2016-04-02 07:07:00,862:WARNING:letsencrypt.cli:Attempting to renew cert from /etc/letsencrypt/renewal/www.example.com.conf produced an unexpected error: You've asked to renew/replace a seemingly valid certificate with a test certificate (domains: www.example.com, example.com). We will not do that unless you use the --break-my-certs flag!. Skipping. All renewal attempts failed. The following certs could not be renewed: /etc/letsencrypt/live/www.example.com/fullchain.pem (failure) 1 renew failure(s), 0 parse failure(s)
I stupidly tried the command with the
user@vps:~/letsencrypt# ./letsencrypt-auto renew --break-my-certs Updating letsencrypt and virtual environment dependencies...You are using pip version 7.1.2, however version 8.1.1 is available. You should consider upgrading via the 'pip install --upgrade pip' command. .... Running with virtualenv: /root/.local/share/letsencrypt/bin/letsencrypt renew --break-my-certs Processing /etc/letsencrypt/renewal/www.example.com.conf new certificate deployed with reload of apache server; fullchain is /etc/letsencrypt/live/www.example.com/fullchain.pem Congratulations, all renewals succeeded. The following certs have been renewed: /etc/letsencrypt/live/www.example.com/fullchain.pem (success)
I thought it was it, but when I tried to connect to my website, I got an error telling me that the certificate was issued by an untrusted party. (However, the validity dates are OK.)
So I tried the first command again:
user@vps:~/letsencrypt# ./letsencrypt-auto renew Updating letsencrypt and virtual environment dependencies....... Running with virtualenv: /root/.local/share/letsencrypt/bin/letsencrypt renew Processing /etc/letsencrypt/renewal/www.example.com.conf The following certs are not due for renewal yet: /etc/letsencrypt/live/www.example.com/fullchain.pem (skipped) No renewals were attempted.
But as you can see, it doesn't work.