Renew letsencrypt error CERTIFICATE_VERIFY_FAILED

NethServer Version: NethServer release 7.6.1810
Module: certificate server

I have a letsencrypt certificate.

It is about to expire but when requesting a new certificate I get the following error

An unexpected error occurred: SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618) Please see the logfiles in /var/log/letsencrypt for more details.

/var/log/letsencrypt for

2020-03-08 11:15:19,497:DEBUG:certbot._internal.main:certbot version: 1.0.0
2020-03-08 11:15:19,497:DEBUG:certbot._internal.main:Arguments: [’–webroot’, ‘–webroot-path’, ‘/var/www/html/’, ‘–text’, ‘–non-interactive’, ‘–agree-tos’, ‘–email’, ‘XXXXX@XXXXXX.com’, ‘-d’, ‘XXXX.XXXXXXX.com’, ‘-d’, ‘xxxx.xxxxxx.com’, ‘–test-cert’, ‘–quiet’]
2020-03-08 11:15:19,497:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2020-03-08 11:15:19,521:DEBUG:certbot._internal.log:Root logging level set at 30
2020-03-08 11:15:19,521:INFO:certbot._internal.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2020-03-08 11:15:19,522:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2020-03-08 11:15:19,522:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Place files in webroot directory
Interfaces: IAuthenticator, IPlugin
Entry point: webroot = certbot._internal.plugins.webroot:Authenticator
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7fe4dc3caf50>
Prep: True
2020-03-08 11:15:19,523:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7fe4dc3caf50> and installer None
2020-03-08 11:15:19,523:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2020-03-08 11:15:19,666:DEBUG:acme.client:Sending GET request to https://acme-staging-v02.api.letsencrypt.org/directory.
2020-03-08 11:15:19,669:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-staging-v02.api.letsencrypt.org
2020-03-08 11:15:20,164:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File “/usr/bin/certbot”, line 9, in
load_entry_point(‘certbot==1.0.0’, ‘console_scripts’, ‘certbot’)()
File “/usr/lib/python2.7/site-packages/certbot/main.py”, line 14, in main
return internal_main.main(cli_args)
File “/usr/lib/python2.7/site-packages/certbot/_internal/main.py”, line 1350, in main
return config.func(config, plugins)
File “/usr/lib/python2.7/site-packages/certbot/_internal/main.py”, line 1221, in certonly
le_client = _init_le_client(config, auth, installer)
File “/usr/lib/python2.7/site-packages/certbot/_internal/main.py”, line 607, in _init_le_client
acc, acme = _determine_account(config)
File “/usr/lib/python2.7/site-packages/certbot/_internal/main.py”, line 523, in _determine_account
config, account_storage, tos_cb=_tos_cb)
File “/usr/lib/python2.7/site-packages/certbot/_internal/client.py”, line 175, in register
acme = acme_from_config_key(config, key)
File “/usr/lib/python2.7/site-packages/certbot/_internal/client.py”, line 45, in acme_from_config_key
return acme_client.BackwardsCompatibleClientV2(net, key, config.server)
File “/usr/lib/python2.7/site-packages/acme/client.py”, line 827, in init
directory = messages.Directory.from_json(net.get(server).json())
File “/usr/lib/python2.7/site-packages/acme/client.py”, line 1158, in get
self._send_request(‘GET’, url, **kwargs), content_type=content_type)
File “/usr/lib/python2.7/site-packages/acme/client.py”, line 1107, in _send_request
response = self.session.request(method, url, *args, **kwargs)
File “/usr/lib/python2.7/site-packages/requests/sessions.py”, line 464, in request
resp = self.send(prep, **send_kwargs)
File “/usr/lib/python2.7/site-packages/requests/sessions.py”, line 576, in send
r = adapter.send(request, **kwargs)
File “/usr/lib/python2.7/site-packages/requests/adapters.py”, line 431, in send
raise SSLError(e, request=request)
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)
2020-03-08 11:15:20,166:ERROR:certbot._internal.log:An unexpected error occurred:

Why are you using the staging CA?

thanks.
The problem was internal.

I have a load balancer and the request was sent by a different IP to the service.

redirecting traffic has updated successfully.

1 Like