Code:
]# certbot renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log
-------------------------------------------------------------------------------
Processing /usr/local/etc/letsencrypt/renewal/www.xxxx.yyy.conf
-------------------------------------------------------------------------------
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator webroot, Installer None
Attempting to renew cert (www.xxxx.yyy) from /usr/local/etc/letsencrypt/renewal/www.xxxx.yyy.conf produced an unexpected error: 'module' object has no attribute 'UnsupportedExtension'. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/usr/local/etc/letsencrypt/live/www.xxxx.yyy/fullchain.pem (failure)
-------------------------------------------------------------------------------
All renewal attempts failed. The following certs could not be renewed:
/usr/local/etc/letsencrypt/live/www.xxxx.yyy/fullchain.pem (failure)
-------------------------------------------------------------------------------
1 renew failure(s), 0 parse failure(s)
The log shows:
Code:
2018-06-10 17:10:33,809:DEBUG:certbot.main:certbot version: 0.25.0
2018-06-10 17:10:33,810:DEBUG:certbot.main:Arguments: []
2018-06-10 17:10:33,810:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2018-06-10 17:10:33,951:DEBUG:certbot.log:Root logging level set at 20
2018-06-10 17:10:33,953:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2018-06-10 17:10:34,099:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x29efdd8c> and installer <certbot.cli._Default object at 0x29efdd8c>
2018-06-10 17:10:34,160:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2018-06-29 23:33:20 UTC.
2018-06-10 17:10:34,160:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2018-06-10 17:10:34,160:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
2018-06-10 17:10:34,170:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot
Description: Place files in webroot directory
Interfaces: IAuthenticator, IPlugin
Entry point: webroot = certbot.plugins.webroot:Authenticator
Initialized: <certbot.plugins.webroot.Authenticator object at 0x29ebde2c>
Prep: True
2018-06-10 17:10:34,171:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0x29ebde2c> and installer None
2018-06-10 17:10:34,171:INFO:certbot.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2018-06-10 17:10:34,188:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(status=None, terms_of_service_agreed=None, contact=(u'mailto:ffff@gggg.hh.jj',), agreement=u'https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf', key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x29efdd6c>)>)), uri=u'https://acme-v01.api.letsencrypt.org/acme/reg/19923440', new_authzr_uri=u'https://acme-v01.api.letsencrypt.org/acme/new-authz', terms_of_service=u'https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf'), 23d9c0b52da631b66f4153af351b344f, Meta(creation_host=u'evenas.org', creation_dt=datetime.datetime(2017, 8, 13, 20, 45, 27, tzinfo=<UTC>)))>
2018-06-10 17:10:34,191:DEBUG:acme.client:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2018-06-10 17:10:34,219:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2018-06-10 17:10:34,308:WARNING:certbot.renewal:Attempting to renew cert (www.xxxx.yyy) from /usr/local/etc/letsencrypt/renewal/www.xxxx.yyy.conf produced an unexpected error: 'module' object has no attribute 'UnsupportedExtension'. Skipping.
2018-06-10 17:10:34,435:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/local/lib/python2.7/site-packages/certbot/renewal.py", line 429, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File "/usr/local/lib/python2.7/site-packages/certbot/main.py", line 1154, in renew_cert
le_client = _init_le_client(config, auth, installer)
File "/usr/local/lib/python2.7/site-packages/certbot/main.py", line 649, in _init_le_client
return client.Client(config, acc, authenticator, installer, acme=acme)
File "/usr/local/lib/python2.7/site-packages/certbot/client.py", line 239, in __init__
acme = acme_from_config_key(config, self.account.key, self.account.regr)
File "/usr/local/lib/python2.7/site-packages/certbot/client.py", line 50, in acme_from_config_key
return acme_client.BackwardsCompatibleClientV2(net, key, config.server)
File "/usr/local/lib/python2.7/site-packages/acme/client.py", line 721, in __init__
directory = messages.Directory.from_json(net.get(server).json())
File "/usr/local/lib/python2.7/site-packages/acme/client.py", line 1054, in get
self._send_request('GET', url, **kwargs), content_type=content_type)
File "/usr/local/lib/python2.7/site-packages/acme/client.py", line 1003, in _send_request
response = self.session.request(method, url, *args, **kwargs)
File "/usr/local/lib/python2.7/site-packages/requests/sessions.py", line 508, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python2.7/site-packages/requests/sessions.py", line 618, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python2.7/site-packages/requests/adapters.py", line 440, in send
timeout=timeout
File "/usr/local/lib/python2.7/site-packages/urllib3/connectionpool.py", line 601, in urlopen
chunked=chunked)
File "/usr/local/lib/python2.7/site-packages/urllib3/connectionpool.py", line 346, in _make_request
self._validate_conn(conn)
File "/usr/local/lib/python2.7/site-packages/urllib3/connectionpool.py", line 850, in _validate_conn
conn.connect()
File "/usr/local/lib/python2.7/site-packages/urllib3/connection.py", line 337, in connect
cert = self.sock.getpeercert()
File "/usr/local/lib/python2.7/site-packages/urllib3/contrib/pyopenssl.py", line 348, in getpeercert
'subjectAltName': get_subj_alt_name(x509)
File "/usr/local/lib/python2.7/site-packages/urllib3/contrib/pyopenssl.py", line 202, in get_subj_alt_name
except (x509.DuplicateExtension, x509.UnsupportedExtension,
AttributeError: 'module' object has no attribute 'UnsupportedExtension'
2018-06-10 17:10:34,435:ERROR:certbot.renewal:All renewal attempts failed. The following certs could not be renewed:
2018-06-10 17:10:34,436:ERROR:certbot.renewal: /usr/local/etc/letsencrypt/live/www.xxxx.yyy/fullchain.pem (failure)
2018-06-10 17:10:34,439:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/local/bin/certbot", line 11, in <module>
load_entry_point('certbot==0.25.0', 'console_scripts', 'certbot')()
File "/usr/local/lib/python2.7/site-packages/certbot/main.py", line 1323, in main
return config.func(config, plugins)
File "/usr/local/lib/python2.7/site-packages/certbot/main.py", line 1235, in renew
renewal.handle_renewal_request(config)
File "/usr/local/lib/python2.7/site-packages/certbot/renewal.py", line 454, in handle_renewal_request
len(renew_failures), len(parse_failures)))
Error: 1 renew failure(s), 0 parse failure(s)
Any ideas what this means?
Last edited: