D
D
DVoropaev2018-08-07 12:21:27
linux
DVoropaev, 2018-08-07 12:21:27

Why is certbot not working?

As a web server - nginx
I'm trying to update a few times already. I restart Nginx.
But when I go to the site - browsers swear at the old certificate

certbot certonly --standalone -d login.(*****).ru
Saving debug log to /var/log/letsencrypt/letsencrypt.log Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org Cert not yet due for renewal
You have an existing certificate that has exactly the same domains or certificate name you requested and isn't close to expiry. (ref: /etc/letsencrypt/renewal/login.(*****).ru.conf)
What would you like to do? -------------------------------------------------------------------------------
1: Keep the existing certificate for now
2: Renew & replace the cert (limit ~5 per 7 days) -------------------------------------------------------------------------------
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2 Renewing an existing certificate Performing the following challenges: tls-sni-01 challenge for login.(*****).ru /usr/lib/python2.7/dist-packages/OpenSSL/rand.py:58: UserWarning: implicit cast from 'char *' to a different pointer type: will be forbidden in the future (check that the types are as you expect; use an explicit ffi.cast() if they are correct)
result_code = _lib.RAND_bytes(result_buffer, num_bytes) Waiting for verification...
Cleaning up challenges Generating key (2048 bits):
/etc/letsencrypt/keys/0004_key-certbot.pem
Creating CSR: /etc/letsencrypt/csr/0004_csr-certbot.pem

IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at /etc/letsencrypt/live/login.(*****).ru/fullchain.pem.
Your cert will expire on 2018-11-05. To obtain a new or tweaked version of this certificate in the future, simply run certbot again. To non-interactively renew all of your certificates, run "certbot renew" - If you like Certbot, please consider supporting our work by: Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate Donating to EFF: https://eff.org/donate-le

Answer the question

In order to leave comments, you need to log in

5 answer(s)
F
fluffybear, 2018-08-07
@fluffybear

show how the certificate is registered in nginx? should be something like

ssl_certificate /etc/letsencrypt/live/ваш_домен/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/ваш_домен/privkey.pem;

R
Radjah, 2018-08-07
@Radjah

> I'm trying to update
I don't see the renew key in the command

M
Maxim, 2018-08-07
@freezl

IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at /etc/letsencrypt/live/login.(*****).ru/fullchain.pem

Reissue of the certificate is successful! In this place it is written that the certificate is saved in the file
/etc/letsencrypt/live/login.(*****).ru/fullchain.pem
And this file should be registered in your nginx config. As stated earlier, something like this
ssl_certificate /etc/letsencrypt/live/login.(*****).ru/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/login.(*****).ru/privkey.pem;

V
vlarkanov, 2018-08-08
@vlarkanov

If the correct path is specified in the config, you need to do systemctl reload nginx (well, or /etc/init.d/nginx reload). Just updated yesterday, asked the same question as the author)

S
shqn, 2015-01-15
@therealvetalhidden

If you are using jQuery then

var $input = $("input:hidden"); // В общем получаете элемент
alert($input.val());

if in normal javascript
var input = document.querySelector("input[type='hidden']");
alert(input.value);

And as for Ajax, what prevents you from immediately doing what you want with the data without writing it to the input?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question