letsencrypt error

Discussion in 'ISPConfig 3 Priority Support' started by Tom John, Dec 30, 2020.

  1. Tom John

    Tom John Active Member HowtoForge Supporter

    Hi guys,
    i want to delete a letsencrypt cert because there is an error when i want to create a new certificate. but i dont know which is the account i have to delete.
    Code:
    root@server4:~# certbot certificates
    Saving debug log to /var/log/letsencrypt/letsencrypt.log
    Renewal configuration file /etc/letsencrypt/renewal/mask1001.com.conf produced an unexpected error: renewal config file {} is missing a required file reference. Skipping.
    
    
    is there an option to see which one is the cert i have to delete?
    thanks for your kind help.

    Code:
    root@server4:~# ls /etc/letsencrypt/accounts/
    acme-v01.api.letsencrypt.org  acme-v02.api.letsencrypt.org
    
    thanks a lot for your help
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Do you want to delete the account or the cert for that site?
     
  3. Tom John

    Tom John Active Member HowtoForge Supporter

    i want to delete the cert for that site, because i get an error when i want to generate the cert for another site on that server
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Try removing the file that gives an error and then issueing the cert.
     
  5. Tom John

    Tom John Active Member HowtoForge Supporter

    thanks for your answer,
    i deleted these accounts in /etc/letsencrypt/renewal
    however i get the following error in the logfile:

    Code:
    root@server4:/etc/letsencrypt/renewal# tail -f /var/log/letsencrypt/letsencrypt.log
    2020-12-30 11:54:44,370:DEBUG:certbot.ocsp:OCSP response for certificate /etc/letsencrypt/live/server2.cl-i.net/cert.pem is signed by the certificate's issuer.
    2020-12-30 11:54:44,372:DEBUG:certbot.ocsp:OCSP certificate status for /etc/letsencrypt/live/server2.cl-i.net/cert.pem is: OCSPCertStatus.GOOD
    2020-12-30 11:54:44,380:DEBUG:urllib3.connectionpool:Starting new HTTP connection (1): ocsp.int-x3.letsencrypt.org:80
    2020-12-30 11:54:44,546:DEBUG:urllib3.connectionpool:http://ocsp.int-x3.letsencrypt.org:80 "POST / HTTP/1.1" 200 527
    2020-12-30 11:54:44,549:DEBUG:certbot.ocsp:OCSP response for certificate /etc/letsencrypt/live/server4.cl-i.net/cert.pem is signed by the certificate's issuer.
    2020-12-30 11:54:44,550:DEBUG:certbot.ocsp:OCSP certificate status for /etc/letsencrypt/live/server4.cl-i.net/cert.pem is: OCSPCertStatus.GOOD
    2020-12-30 11:54:44,558:DEBUG:urllib3.connectionpool:Starting new HTTP connection (1): ocsp.int-x3.letsencrypt.org:80
    2020-12-30 11:54:44,592:DEBUG:urllib3.connectionpool:http://ocsp.int-x3.letsencrypt.org:80 "POST / HTTP/1.1" 200 527
    2020-12-30 11:54:44,594:DEBUG:certbot.ocsp:OCSP response for certificate /etc/letsencrypt/live/visit360go.com/cert.pem is signed by the certificate's issuer.
    2020-12-30 11:54:44,595:DEBUG:certbot.ocsp:OCSP certificate status for /etc/letsencrypt/live/visit360go.com/cert.pem is: OCSPCertStatus.GOOD
    2020-12-30 13:10:15,532:DEBUG:certbot.main:certbot version: 0.40.0
    2020-12-30 13:10:15,532:DEBUG:certbot.main:Arguments: ['-n', '--text', '--agree-tos', '--expand', '--authenticator', 'webroot', '--server', 'https://acme-v02.api.letsencrypt.org/directory', '--rsa-key-size', '4096', '--email', '[email protected]', '--domains', 'sonniger-lebensabend.com', '--domains', 'www.sonniger-lebensabend.com', '--webroot-path', '/usr/local/ispconfig/interface/acme']
    2020-12-30 13:10:15,533:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
    2020-12-30 13:10:15,559:DEBUG:certbot.log:Root logging level set at 20
    2020-12-30 13:10:15,563:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
    2020-12-30 13:10:15,573:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
    2020-12-30 13:10:15,574:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot
    Description: Place files in webroot directory
    Interfaces: IAuthenticator, IPlugin
    Entry point: webroot = certbot.plugins.webroot:Authenticator
    Initialized: <certbot.plugins.webroot.Authenticator object at 0x7fadc2bcfd30>
    Prep: True
    2020-12-30 13:10:15,575:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0x7fadc2bcfd30> and installer None
    2020-12-30 13:10:15,575:INFO:certbot.plugins.selection:Plugins selected: Authenticator webroot, Installer None
    2020-12-30 13:10:15,640:DEBUG:certbot.log:Exiting abnormally:
    Traceback (most recent call last):
      File "/bin/letsencrypt", line 11, in <module>
        load_entry_point('certbot==0.40.0', 'console_scripts', 'certbot')()
      File "/usr/lib/python3/dist-packages/certbot/main.py", line 1382, in main
        return config.func(config, plugins)
      File "/usr/lib/python3/dist-packages/certbot/main.py", line 1249, in certonly
        le_client = _init_le_client(config, auth, installer)
      File "/usr/lib/python3/dist-packages/certbot/main.py", line 607, in _init_le_client
        acc, acme = _determine_account(config)
      File "/usr/lib/python3/dist-packages/certbot/main.py", line 515, in _determine_account
        acc = display_ops.choose_account(accounts)
      File "/usr/lib/python3/dist-packages/certbot/display/ops.py", line 84, in choose_account
        code, index = z_util(interfaces.IDisplay).menu(
      File "/usr/lib/python3/dist-packages/certbot/display/util.py", line 503, in menu
        self._interaction_fail(message, cli_flag, "Choices: " + repr(choices))
      File "/usr/lib/python3/dist-packages/certbot/display/util.py", line 466, in _interaction_fail
        raise errors.MissingCommandlineFlag(msg)
    certbot.errors.MissingCommandlineFlag: Missing command line flag or config entry for this setting:
    Please choose an account
    Choices: ['server3.cl-i.net@2019-06-23T15:33:04Z (f4ae)', 'server1.cl-i.net@2019-03-30T17:36:15Z (e140)', 'server4.cl-i.net@2020-11-22T10:39:30Z (d78d)']
    2020-12-30 13:10:17,080:DEBUG:certbot.main:certbot version: 0.40.0
    2020-12-30 13:10:17,090:DEBUG:certbot.main:Arguments: ['--domains', 'sonniger-lebensabend.com', '--domains', 'www.sonniger-lebensabend.com']
    2020-12-30 13:10:17,090:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
    2020-12-30 13:10:17,110:DEBUG:certbot.log:Root logging level set at 20
    2020-12-30 13:10:17,111:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
    
    
    i think the problem is here maybe?
    Code:
    certbot.errors.MissingCommandlineFlag: Missing command line flag or config entry for this setting:
    Please choose an account
    Choices: ['server3.cl-i.net@2019-06-23T15:33:04Z (f4ae)', 'server1.cl-i.net@2019-03-30T17:36:15Z (e140)', 'server4.cl-i.net@2020-11-22T10:39:30Z (d78d)']
    
    does this mean i have to delete an account here:
    Code:
    root@server4:~# ls /etc/letsencrypt/accounts/
    acme-v01.api.letsencrypt.org  acme-v02.api.letsencrypt.org
    
    if so how i can find our which account to delete?
    thanks a lot for your help
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    These are not two accounts, these are two api versions and you need both. If you have two accounts, look into the v02.api.letsencrypt.org directory.
     
  7. Tom John

    Tom John Active Member HowtoForge Supporter

    Hi,
    thanks for your answer.
    i have 3 accounts, how i know which one to delete?
    Code:
    root@server4:/etc/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory# ls
    d78d3ea9b0e5a431e29f4431a0439cc6  f4ae64fe8ccaac09631ba85a5162e767
    e140ef49319ad373d6407c381031fa27
    
    
    is it possible that the problems occure because i migrate with ispconfig migration toll all data to other server as a copy and then the certificates are moved to another server?
    thanks a lot for your kind help
     
  8. Tom John

    Tom John Active Member HowtoForge Supporter

    I just saw when i go into the dir. on meta.json there is the information which account is for which domain, so i know now which account to delete

    after deleting the accounts not needed the certificate generates well.
     

Share This Page