bluecherrydvr / bluecherry-apps

Bluecherry surveillance system (server application)
http://www.bluecherrydvr.com
GNU General Public License v2.0
217 stars 68 forks source link

Lets Encrypt: Failed to renew certificate domain with error: Invalid version. The only valid version for X509Req is 0. #629

Closed curtishall closed 12 months ago

curtishall commented 1 year ago
root@7007cams:/tmp# certbot renew --config-dir=/usr/share/bluecherry/nginx-includes/letsencrypt/ 
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing
/usr/share/bluecherry/nginx-includes/letsencrypt/renewal/7007cams.bluecherry.app.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Renewing an existing certificate for 7007cams.bluecherry.app
Failed to renew certificate 7007cams.bluecherry.app with error: Invalid version. The only valid version for X509Req is 0.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
All renewals failed. The following certificates could not be renewed:
  /usr/share/bluecherry/nginx-includes/letsencrypt/live/7007cams.bluecherry.app/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)

Fix is to install certbot 2.7.0...will need to add this to postinstall.sh (or separate all of the python install packages into a new shell script) pip3 install certbot==2.7.0