Code Inherit

Simple Programming Code Examples

SSL

How to renew Let’s Encrypt SSL in linux CentOS 6?

by Leave a Comment 

[root@server ~]# cd /usr/local/letsencrypt
[root@server letsencrypt]# ./certbot-auto renew -dry-run
[root@server letsencrypt]# ./certbot-auto renew

Upgrading certbot-auto 1.2.0 to 1.4.0…
Replacing certbot-auto…
Creating virtual environment…
Installing Python packages…
Installation succeeded.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Processing /etc/letsencrypt/renewal/scmpbd.org.conf
Cert is due for renewal, auto-renewing…
/etc/letsencrypt/options-ssl-apache.conf has been manually modified; updated file saved to /opt/eff.org/certbot/venv/lib64/python3.6/site-packages/certbot _apache/_internal/tls_configs/current-options-ssl-apache.conf. We recommend updating /etc/letsencrypt/options-ssl-apache.conf for security purposes.
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for scmpbd.org
Cleaning up challenges
File: /etc/httpd/conf.d/le_http_01_challenge_pre.conf – Could not be found to be deletedCertbot probably shut down unexpectedly
File: /etc/httpd/conf.d/le_http_01_challenge_post.conf – Could not be found to be deleted
Certbot probably shut down unexpectedly
Attempting to renew cert (scmpbd.org) from /etc/letsencrypt/renewal/scmpbd.org.conf produced an unexpected error: [Errno 2] No such file or directory: ‘/etc/httpd/conf.d/le_http_01_challenge_pre.conf’. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/scmpbd.org/fullchain.pem (failure)
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/scmpbd.org/fullchain.pem (failure)
1 renew failure(s), 0 parse failure(s)

[root@server ~]# cd /usr/local/letsencrypt
[root@server letsencrypt]# ./certbot-auto --webroot -w /home/scipmp/public_html renew

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Processing /etc/letsencrypt/renewal/scmpbd.org.conf
Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator webroot, Installer apache
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for scmpbd.org
Using the webroot path /home/scipmp/public_html for all unmatched domains.
Waiting for verification…
Cleaning up challenges
new certificate deployed with reload of apache server; fullchain is
/etc/letsencrypt/live/scmpbd.org/fullchain.pem
Congratulations, all renewals succeeded. The following certs have been renewed:
/etc/letsencrypt/live/scmpbd.org/fullchain.pem (success)

https://www.cdn77.com/tls-test
https://crt.sh/?q=scmpbd.org

[root@server ~]# ./certbot-auto certificates
Upgrading certbot-auto 1.2.0 to 1.5.0…
Replacing certbot-auto…
Creating virtual environment…
Installing Python packages…
Installation succeeded.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Found the following certs:
Certificate Name: scmpbd.org
Serial Number: 4a2cd4538526053d9ad395112b6a3faabde
Domains: scmpbd.org
Expiry Date: 2020-08-15 07:38:30+00:00 (VALID: 73 days)
Certificate Path: /etc/letsencrypt/live/scmpbd.org/fullchain.pem
Private Key Path: /etc/letsencrypt/live/scmpbd.org/privkey.pem

Filed Under: SSL