Message: Incomplete authorizations (follow-up)

**Heppi** · Apr 11th 2018

Ooops, it happened again.
I got expiration notice mails from Letsencrypt for two domains.
I inspected it showing same message "Incomplete authorizations"!

It stayed for several days, so i suspect i-mscp plugin is not handling further LE updates!
After I pressed the Button "Status von diesem Posten für einen neuen Versuch ändern" the message switched to OK.
In the moment, everything is clean. Stay tuned...

Peter

**web4you** · Apr 12th 2018

Hi Heppi

I have the same problem here.

But as you can see i have two different Status. Under "Domain" all Status are ok. (Pic-1) After i change to "CSS-Zertifikat vewalten" i get the message "A task fo rSSL Certificate is in progress (Pic-2).

Wher do you have this Buton: "Status von diesem Posten für einen neuen Versuch ändern" ?

**Heppi** · Apr 12th 2018

DebugBar!

**web4you** · Apr 12th 2018

Quote from Heppi

DebugBar!

Ok Debug Bar installed. BUT cant find it. Sorry.

**Nuxwin** · Apr 12th 2018

Good evening,

The Incomplete authorizations generally mean that there was a bad setup at DNS or unexpected redirection. We can say nothing with full logs from /var/log/letsencrypt

**web4you** · Apr 12th 2018

Quote from Nuxwin

Good evening,

The Incomplete authorizations generally mean that there was a bad setup at DNS or unexpected redirection. We can say nothing with full logs from /var/log/letsencrypt

ok this is from letsencrypt.log.19 from Apr 2 00:11 as an example. There are some logs without any error and some with same error.

Code

2018-04-01 22:10:23,194:DEBUG:certbot.main:certbot version: 0.15.0
Last view lines...
2018-04-01 22:11:12,177:INFO:certbot.auth_handler:Cleaning up challenges
2018-04-01 22:11:12,177:DEBUG:certbot.plugins.webroot:Removing /var/www/imscp/gui/plugins/LetsEncrypt/acme/.well-known/acme-challenge/2jPMgii-sAxXycKNoN5SIhMppwbJ7-S9a7x91KWOvIs
2018-04-01 22:11:12,177:DEBUG:certbot.plugins.webroot:All challenges cleaned up, removing /var/www/imscp/gui/plugins/LetsEncrypt/acme/.well-known/acme-challenge
2018-04-01 22:11:12,177:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
File "/usr/local/sbin/certbot", line 11, in <module>
sys.exit(main())
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 743, in main
return config.func(config, plugins)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 683, in certonly
lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 77, in _get_and_save_cert
renewal.renew_cert(config, domains, le_client, lineage)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/renewal.py", line 297, in renew_cert
new_certr, new_chain, new_key, _ = le_client.obtain_certificate(domains)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/client.py", line 313, in obtain_certificate
self.config.allow_subset_of_names)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/auth_handler.py", line 84, in get_authorizations
self.verify_authzr_complete()
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/auth_handler.py", line 298, in verify_authzr_complete
raise errors.AuthorizationError("Incomplete authorizations")
AuthorizationError: Incomplete authorizations

Display More

**Nuxwin** · Apr 12th 2018

@web4you

Not the full logs...

**web4you** · Apr 12th 2018

Ok a checked all my logs from nr. 151 to 74

I deleted a DNS entry bibergugger on my dnsmadeeasy but not in i-mscp. Log is attached.

After that next error in log 36 but ther i did not changed anything like also on all of the following logs. Any of this domains now (and many more) have now this "Incomplete authorizations" status.

**web4you** · Apr 13th 2018

Ok i fixed it now with: (Does not explain the reason of this errors)!

Code

mysql> UPDATE `imscp`.`letsencrypt` SET `letsencrypt_status` = 'torenew' WHERE `letsencrypt_status` = 'Incomplete authorizations';

and

Code

perl /var/www/imscp/gui/plugins/LetsEncrypt/cronjobs/renew.pl -dv

**Heppi** · Apr 16th 2018

Hmm, I found the real reason of my "Incomplete authorizations".

Sort of user error

My fail2ban banned a range of IPs which included Letsencrypt server too

So updates doesn't finish successfully.

Just to give an example on NOT "How to do it". My fault.
Peter

Message: Incomplete authorizations (follow-up)

Share

Daily visitors