1

Topic: Certbot Renew-Cron failing - certbot failing with expired certificate

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail 1.3.2
- Deployed with downloadable installer?
- Linux/BSD distribution name and version: Ubuntu
- Store mail accounts in which backend MySQL/
- Web server (Nginx):
- Manage mail accounts with iRedAdmin-Pro? YES

====
The standard certbot cron command is failing on a standard iRedadmin install. it has never successfully restarted services so have had to restart postfix, nginx etc but this moth failed to renew the certs.

I then ran into a problem where i couldn't manually renew as the certs were expired and https failed to allow certification owing to the out of date cert.

I got around the certification issue by:

systemctl stop nginx
certbot renew  --standalone
systemctl start nginx
service postfix restart 
service nginx restart 
service dovecot restart

The failure of the crontab returns

/bin/sh: 1: /root/certbot#: not found

crontab -l (as root) shows

# CERTBOT daily renewal job
1 3 * * *   certbot renew --post-hook 'service postfix restart; service nginx restart; service dovecot restart'

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Certbot Renew-Cron failing - certbot failing with expired certificate

- Please specify correct absolute path to the "certbot" command.
- Also specify absolute path to the "service" command. We experienced few failures with "service" command instead of path like "/usr/sbin/service".