Debian 9.4, nginx 1.13

Error code: SEC_ERROR_EXPIRED_CERTIFICATE - The certificate has expired. When updating, an error occurs:

expected /etc/letsencrypt/live/site.ru/fullchain.pem/etc/letsencrypt/renewal/site.com.conf is broken. Skipping.

/etc/letsencrypt/renewal/site.ru.conf

# renew_before_expiry = 30 days version = 0.19.0 archive_dir = /etc/letsencrypt/archive/site.ru cert = /etc/letsencrypt/live/site.ru/cert.pem privkey = /etc/letsencrypt/live/site.ru/privkey.pem chain = /etc/letsencrypt/live/site.ru/chain.pem fullchain = /etc/letsencrypt/live/site.ru/fullchain.pem # Options used in the renewal process [renewalparams] authenticator = webroot installer = None account = 55669eca7dfdcfcf0f4fceb9f50f0352 [[webroot_map]] site.ru = /var/www/html/site

Please help!

  • Well, although I would show the contents of this file, perhaps - andmal
  • And yes, you apparently once managed to break the symlink? Did you make any manipulations with the letsencrypt directory? - andreymal
  • delete all certificates and generate new ones? - Ivan Konkin
  • It is possible and so, only it is better not to delete, but to rename the directory in letsencrypt_old for example, so that a backup is left just in case. And don't break the symlinks anymore :) - andreymal

1 answer 1

letsencrypt rename to letsencrypt_old: mv /etc/letsencrypt/ /etc/letsencrypt_old/ nginx web server is forwarded to port 80, then: letsencrypt certonly --email <your-email-address> -d <your-domain-name> --webroot -w /var/www/html/site Everything works!