1

Topic: certificate expired

My version is 1.6.1 PGSQL edition.

I installed with the download version exactly 90 days ago...

Hi, I installed iredmail on sept 10th of this year and using the let's encrypt cert.  My power went out today and when the server came back up, I see the cert has expired (what are the odds).  So I guess it wasn't renewing or if it was, maybe daily? But either way, I am now expired.

I tried to rerun the let's encrypt cert install but I get an error that it can't contact my server.  Well it can't because it needs a cert, I assume, because it is kicking back and saying date expired.  So do I have to turn off ssl until this is solved and if so, how?  Other approach?

here's the error:

Processing /etc/letsencrypt/renewal/mail.xxxxx.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator webroot, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for mail.xxxxx.com
Using the webroot path /var/www/html for all unmatched domains.
Waiting for verification...
Challenge failed for domain mail.xxxxxx.com
http-01 challenge for mail.xxxxxx.com
Cleaning up challenges
Attempting to renew cert (mail.xxxxxx.com) from /etc/letsencrypt/renewal/mail.xxxxxx.com.conf produced an unexpected error: Some challenges have failed.. Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/mail.xxxxxx.com/fullchain.pem (failure)

So I tried starting over, generated a new key, setup new symlinks, etc, but I guess the cert was never renewed even though the date on it is correct (like it was touched).

Help!

Thanks,

Jerry

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: certificate expired

If renew failed, try to request a new cert instead.

3

Re: certificate expired

ZhangHuangbin wrote:

If renew failed, try to request a new cert instead.

On my server I needed to stop nginx or Apache service and then run certbot.  It sets up a mini-server and Nginx or Apache running causes the failure you describe on my server too

Service apache2 stop   Or
Service nginx stop
Certbot …

Andrew

4

Re: certificate expired

certbot works fine if you're running web service with a self-signed cert if you choose the "--webroot" argument.