LetsEncrypt plugin - Cannot revoke SSL certificate - Command died at line 896, propagated at line 899...

**sfsolutions** · Aug 3rd 2018

Hi,

a renewal of a cert did not work so i tried to revocate.

Now i get this error:

Died at /var/www/imscp/gui/plugins/LetsEncrypt/backend/LetsEncrypt.pm line 896.

...propagated at /var/www/imscp/gui/plugins/LetsEncrypt/backend/LetsEncrypt.pm line 899.

I use i-mscp 1.5.3, with LE 3.5.0 on Ubuntu 16

Your help is very much appreciated.

Best wishes

Niels

**Nuxwin** · Aug 3rd 2018

sfsolutions

Nothing hang. There is an error somewhere and the error that you've reported is not clear enough.

Please do the following:

stop the imscp_daemon service: service imscp_daemon stop
For the Let's Encrypt with revocation error, click on the Force retry button in the UI
Process the pending backend requests manually by running the following command: perl /var/www/imscp/engine/imscp-rqst-mngr -dv
Provide us with the full output of the command above

Once done, don't forget to start the imscp_daemon service again: service imscp_daemon start

BTW: Please make use of bbcode.

**sfsolutions** · Aug 4th 2018

Hi,

here is the output.

Code

perl /var/www/imscp/engine/imscp-rqst-mngr -dv
[DEBUG] iMSCP::Bootstrapper::boot: Booting backend....
[DEBUG] iMSCP::LockFile::acquire: Acquiring exclusive lock on /var/lock/imscp.lock
[DEBUG] iMSCP::EventManager::_init: Loading /etc/imscp/listeners.d/10_php_confoptions_override.pl listener file
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks for: CronJobs (ID 8)
[DEBUG] Modules::Plugin::_executePluginAction: Executing run( ) action on Plugin::CronJobs
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks for: InstantSSH (ID 1)
[DEBUG] Modules::Plugin::_executePluginAction: Executing run( ) action on Plugin::InstantSSH
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks for: RoundcubePlugins (ID 5)
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks for: Postscreen (ID 6)
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks for: ClamAV (ID 7)
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks for: PanelRedirect (ID 9)
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks for: ServerDefaultPage (ID 10)
[DEBUG] Modules::Plugin::_executePluginAction: Executing run( ) action on Plugin::ServerDefaultPage
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks for: LetsEncrypt (ID 11)
[DEBUG] Modules::Plugin::_executePluginAction: Executing run( ) action on Plugin::LetsEncrypt
[DEBUG] iMSCP::Execute::execute: initctl version 2>/dev/null | grep -q upstart
[DEBUG] iMSCP::Service::_detectInit: Upstart init system has been detected
[DEBUG] iMSCP::Execute::execute: /etc/init.d/apache2 status
[DEBUG] iMSCP::Provider::Service::Sysvinit::_exec: * apache2 is running
[DEBUG] (eval): Executing 'todelete' tasks for the 'zahnaerzte-westend.de' SSL certificate
[DEBUG] iMSCP::Execute::execute: /usr/local/sbin/certbot revoke --email [email protected] --agree-tos --user-agent-comment i-MSCP-LetsEncrypt/3.5.0 --quiet --non-interactive --work-dir /var/lib/letsencrypt --logs-dir /var/log/letsencrypt --max-log-backups 100 --reason unspecified --cert-path /etc/letsencrypt/live/zahnaerzte-westend.de/cert.pem
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Plugin tasks for: PhpSwitcher (ID 12)
[DEBUG] Modules::Plugin::_executePluginAction: Executing run( ) action on Plugin::PhpSwitcher
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::ServerIP tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::ServerIP
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::SSLcertificate tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::SSLcertificate
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::User tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::User
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Domain tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Domain
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Subdomain tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Subdomain
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Alias tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Alias
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::SubAlias tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::SubAlias
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::CustomDNS tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::CustomDNS
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::CustomDNS tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::CustomDNS
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::FtpUser tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::FtpUser
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Mail tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Mail
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Htpasswd tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Htpasswd
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Htgroup tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Htgroup
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Htaccess tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Htaccess
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::SubAlias tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::SubAlias
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Alias tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Alias
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Subdomain tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Subdomain
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::Domain tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::Domain
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: Processing Modules::User tasks...
[DEBUG] iMSCP::DbTasksProcessor::processDbTasks: No task to process for Modules::User
[DEBUG] iMSCP::Execute::execute: perl /var/www/imscp/engine/imscp-sw-mngr 'WyI1OCIsIjciLCIvaHRkb2NzIiwid3BfIiwicHJpZGF0b3J3cCIsInByaWRhdG9yd3AiLCI7Ul8xaGo5WCIsIndwcHJpYWRtaW4iLCIwM3U/S2gqTyIsInZhc2NvLXByaWRhdEBnbXguZGUiLCJ0b2FkZCIsInllcyIsIjYiLCIwIiwiMCIsIjAiXQ=='
[DEBUG] iMSCP::Execute::execute: rm -fR /tmp/sw-58-7
[DEBUG] iMSCP::LockFile::release: Releasing exclusive lock on /var/lock/imscp.lock

Display More

**Nuxwin** · Aug 4th 2018

sfsolutions

I don't see any error here... Well please execute the following command as root user:

Code

/usr/local/sbin/certbot revoke --email [email protected] --agree-tos --user-agent-comment i-MSCP-LetsEncrypt/3.5.0 --non-interactive --work-dir /var/lib/letsencrypt --logs-dir /var/log/letsencrypt --max-log-backups 100 --reason unspecified --cert-path /etc/letsencrypt/live/zahnaerzte-westend.de/cert.pem

and provide us with the full output.

**sfsolutions** · Aug 5th 2018

here it is:

Code

root@ispcp:~# /usr/local/sbin/certbot revoke --email [email protected] --agree-tos --user-agent-comment i-MSCP-LetsEncrypt/3.5.0 --non-interactive --work-dir /var/lib/letsencrypt --logs-dir /var/log/letsencrypt --max-log-backups 100 --reason unspecified --cert-path /etc/letsencrypt/live/zahnaerzte-westend.de/cert.pem
Saving debug log to /var/log/letsencrypt/letsencrypt.log
root@ispcp:~#

and here from the log:

Code

2018-08-05 13:00:03,578:DEBUG:certbot.main:certbot version: 0.26.1
2018-08-05 13:00:03,578:DEBUG:certbot.main:Arguments: ['--email', '[email protected]', '--agree-tos', '--user-agent-comment', 'i-MSCP-LetsEncrypt/3.5.0', '--non-interactive', '--work-dir', '/var/lib/letsencrypt', '--logs-dir', '/var/log/letsencrypt', '--max-log-backups', '100', '--reason', 'unspecified', '--cert-path', '/etc/letsencrypt/live/zahnaerzte-westend.de/cert.pem']
2018-08-05 13:00:03,578:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#nginx,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2018-08-05 13:00:03,985:DEBUG:certbot.log:Root logging level set at 20
2018-08-05 13:00:03,986:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2018-08-05 13:00:04,047:DEBUG:certbot.main:Revoking /etc/letsencrypt/live/zahnaerzte-westend.de/cert.pem using Account Key
2018-08-05 13:00:04,492:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2018-08-05 13:00:04,811:DEBUG:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
2018-08-05 13:00:05,393:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 658
2018-08-05 13:00:05,395:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 658
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Sun, 05 Aug 2018 11:00:05 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 05 Aug 2018 11:00:05 GMT
Connection: keep-alive
{
"P69aAAybKQU": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}
2018-08-05 13:00:05,396:DEBUG:certbot.main:Reason code for revocation: 0
2018-08-05 13:00:05,396:DEBUG:acme.client:Requesting fresh nonce
2018-08-05 13:00:05,396:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/revoke-cert.
2018-08-05 13:00:05,578:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/revoke-cert HTTP/1.1" 405 0
2018-08-05 13:00:05,579:DEBUG:acme.client:Received response:
HTTP 405
Server: nginx
Content-Type: application/problem+json
Content-Length: 103
Allow: POST
Replay-Nonce: FTheMJWv8__kfTIlzoLJZZS7LkJYTTdIna2z-bB7RCc
Expires: Sun, 05 Aug 2018 11:00:05 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 05 Aug 2018 11:00:05 GMT
Connection: keep-alive
2018-08-05 13:00:05,580:DEBUG:acme.client:Storing nonce: FTheMJWv8__kfTIlzoLJZZS7LkJYTTdIna2z-bB7RCc
2018-08-05 13:00:05,581:DEBUG:acme.client:JWS payload:
{
"reason": 0,
"resource": "revoke-cert",
"certificate": "MIIGMDCCBRigAwIBAgISAxGul6egJrmyCXxsrpX9jCqbMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQDExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MjkyMDQzMTRaFw0xODA3MjgyMDQzMTRaMCAxHjAcBgNVBAMTFXphaG5hZXJ6dGUtd2VzdGVuZC5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMyXg-ybFxyQNA2_iTfOp010_P37tQfvfjWZK_8eiAyN_o6RQB8t6XkhBPatrh2PqHK8SJG9LuwlFzYU8ziL8EfnUz9LFeVaUvSGzA6Hnhz6qaoFpytktH_8H7wSIXEKdcWvmro75AtJntPr7frqVUQlRGxMHOdiOPqCEKutNNwKyNAdSNv7WGKwxuT1aUxPx2R0A19rYcNmeIh6oTA0ck_lyx71E15E7XsvLf7P-YK4y7695xrZo8nKD0e1u2Z8NOP9PTefHggZ9YWY2Q19XDpPHrxnerHl9vSkoIzSjRBQKK1J2VPk3Mai8hno5EE4YEZyBaWGdjzHsR4tp8CTg6MCAwEAAaOCAzgwggM0MA4GA1UdDwEB_wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH_BAIwADAdBgNVHQ4EFgQUhi5Wr_5a4ngHKLcZOT4GFXpsHBAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7_Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzA7BgNVHREENDAyghl3d3cuemFobmFlcnp0ZS13ZXN0ZW5kLmRlghV6YWhuYWVyenRlLXdlc3RlbmQuZGUwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ANt0r-7LKeyx_so-cW0s5bmquzb3hHGDx12dTze2H79kAAABYxNcILUAAAQDAEcwRQIhAMUpK0-LMtD2o09FxGPFRNSSdCuPpNKWs1Z9j90G6WfRAiAdy6UsSYv3fL_1vkk_zLAvkUBqUfvcjKMpJV8BWuwijgB2ACk8UZZUyDlluqpQ_FgH1Ldvv1h6KXLcpMMM9OVFR_R4AAABYxNcINUAAAQDAEcwRQIgGk4k3kQ2hE-CiRd-CFW_DVx5HYX7GcOD7tuotJE3pG4CIQDGx6qPkQfT8H1Q4ZyKgaqJDp2ODi2f73NZmzZKJUEQgzANBgkqhkiG9w0BAQsFAAOCAQEAQ7UfYJ6Lbzq2WRpX4A6VUCh-vUQY-lhYEwTKWWnUy5noSAkxz4zxzC66sAd0PuA-XAeWlSFZJhvKcUNabQo-I9Oi9Qdy87Wujb9DT9sV30-1-UHhWYhkCSGq0BcFZ4ChRLr2DZxGZ_dyVxCjMeNKWJUEW2fyjg80whiRH2rG76ad4Gx_z0Rf-vScCnikItfPyn7HgJHtwevrnPA5rhzfh5wXX4ZUeV21fp1gI1tjT3HoGuV2drmu3XXk8RPkYM4Jg0PyKV37o27As0HQGlBC6oRCnU3--bkflaUJdlIyZYJ8K1QKWMU7YlTTsfmoV1OYMkPtd0SFYU3ixWLYFsGs1w"
}
2018-08-05 13:00:05,591:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/revoke-cert:
{
"protected": "eyJub25jZSI6ICJGVGhlTUpXdjhfX2tmVElsem9MSlpaUzdMa0pZVFRkSW5hMnotYkI3UkNjIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9yZXZva2UtY2VydCIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvcmVnLzEwNzU0NDczIiwgImFsZyI6ICJSUzI1NiJ9",
"payload": "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",
"signature": "KTFOjzRHsadj0f2QcuJeExtRqf2-5gWA51cv6Q7vkVJB2Gfb74x64rieBBQiJEz8CHqOniaSDjOvcrq_MmQetGxJKjv2fI8oYkcCdoaUHvT7EMpl3OBk3tIwra3Zt2RiQFnfq_tAzQnVDtsk2MFCWUs9QBq1VdfynQIGLJGJJr9xiUVfprCv2vk99CPhuD7VBQ_YARtmw86MHX16EZwUXj2djX874kXVP1xeWAzJ8TgMc_K5kng_foUyW3RByvkK0iNTcwFhPrusN-JOdZtG_-Ai2qbyGTd3V3SohYlXLIN53Gvm3IMtd9XO73cy0-390DHTjkKp5Oz6q7tLNdnJjw"
}
2018-08-05 13:00:05,788:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/revoke-cert HTTP/1.1" 409 112
2018-08-05 13:00:05,790:DEBUG:acme.client:Received response:
HTTP 409
Server: nginx
Content-Type: application/problem+json
Content-Length: 112
Boulder-Requester: 10754473
Replay-Nonce: uPN4YM31XCapwekMg09tQXeVQekPS4S9pnI-c5xKdz0
Expires: Sun, 05 Aug 2018 11:00:05 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 05 Aug 2018 11:00:05 GMT
Connection: close
{
"type": "urn:ietf:params:acme:error:malformed",
"detail": "Certificate already revoked",
"status": 409
}
2018-08-05 13:00:05,790:DEBUG:acme.client:Storing nonce: uPN4YM31XCapwekMg09tQXeVQekPS4S9pnI-c5xKdz0

Display More

**Nuxwin** · Aug 5th 2018

sfsolutions

Apart the fact that the SSL certificate is already revoked, I don't see any error there. Wel, I'll check the error parser inside the plugin because normally, if the SSL certificate is already revoked, the plugin should just go ahead:

Perl

sub _getNewStatusFromErrorString
{
my ( undef, $status, $errStr ) = @_;
return 'Unknown error' unless defined $errStr;
return 'todelete' if $errStr =~ /certificate already revoked/i;
return 'todelete' if $status eq 'todelete' && $errStr =~ /\Qno \E(?:\Qcertificate found\E|\Qexisting certificates found\E|\Qsuch certificate\E)/i;
# Errors that lead to pending task such as a Let's Encrypt rate limit hit, service outage...
return 'pending' if $errStr =~ /
(?:\Qglobal certificate issuance limit reached\E|\Qthe server experienced an internal error\E|\Qtoo many \E(?:
\Qcertificates already issued\E|\Qcurrently pending authorizations\E|\Qinvalid authorizations recently\E|\Qregistrations from this ip\E))
/ix;
#return 'pending' if $status eq 'todelete';
# Error with no particular treatment
$errStr;
}

Display More

**sfsolutions** · Aug 6th 2018

Thx. Happy to find a solution soon. Is it possible to tell I-mach just to get a new cert I stead of first revocate ?

**sfsolutions** · Aug 7th 2018

i foudn a solution. I could renew cert on the shell with certbot.

I do not knwo it it will renew automatically but now it works.

LetsEncrypt plugin - Cannot revoke SSL certificate - Command died at line 896, propagated at line 899...

Nuxwin Aug 3rd 2018

Nuxwin Aug 3rd 2018

Share

Daily visitors