Renewal installation failure

  • Resolved Mirco Babini

    (@mirkolofio)


    2 years, 12 months ago

    Hello, I have installed a cert with RSS on my website with no issues at all.
    The site shows: “Your certificate will be renewed and installed automatically”

    Which is great, hassle free. I’m on cPanel, I added cPanel credentials and so on.
    Few months later (today) the cert was expiring at 20:40. I checked the situation before and after and yeah, still the same message but the cert was not installed automatically.

    I went through the manual process and it was giving an error at the very last installation step. I had to click “Reset Let’s Encrypt”, just went through the same procedure changing nothing (just next, next, next, next) and now it’s done.

    This site has another site installed in a subdomain. Same identical situation there, same issue and same resolution process.

    Should I expect to fail again in 3 months or there’s a way to investigate this issue?

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author Mark

    (@markwolters)

    Hi @mirkolofio,

    hard to say what caused the certificate to not update automatically, could be the plugin could not connect to cPanel for example, failing to install the certificate automatically. If you have debugging enabled, it could be the plugin has written an error message to your debug.log file. Could you check if that is the case?

    Thread Starter Mirco Babini

    (@mirkolofio)

    Sure, check this log file.

    I replaced every occurrence of my domain with “example.org” and the cpanel username with “example”.

    Please note that the site is installed into an Addon domain, the main cpanel domain is another one (because I have more than one into that cpanel account).

    Cert expire date was March 28 @ 19.40 circa.
    AFAICS rsssl tried to renew and install on March 22 (3 times?) and probably successful. BUT in fact on March 28 @ 20:00 the site was not reachable anymore through SSL and I had to manually renew it resetting Let’s Encrypt, because clicking the button was just logging this error over and over:

    > No order for ID 71477359440

    Plugin Author Mark

    (@markwolters)

    Hi @mirkolofio,

    strange, it looks like something goes wrong during renewal which results in the ‘No result for ID..’ error message. This happens when Let’s Encrypt cannot generate a new SSL certificate, a possibility is the plugin using a different generation method than during the initial generation, for example if the original certificate was generated using DNS and the retry is done using verification. A workaround is to either press the ‘Reset Let’s Encrypt’ link to reset the wizard or by removing the /ssl/keys/ folder manually.

    Plugin Author Mark

    (@markwolters)

    Hi @mirkolofio,

    did the above solution fix the issue?

    Thread Starter Mirco Babini

    (@mirkolofio)

    Well, I don’t know. I mean, I had already fixed it manually doing the Reset.

    So I think I just have to wait the next renewal to see how it goes, right?

    Or should I reset once again / removing the /ssl/keys folder manually and re-issue the cert to be 100% sure it will work the next time?

    Thanks.

    Plugin Author Mark

    (@markwolters)

    Hi @mirkolofio,

    if you have resetted the wizard I expect the renewal to work next time. Pressing the reset link will remove the ssl/keys, so you shouldn’t have to manually remove it.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Renewal installation failure’ is closed to new replies.