Certificados renovados, pero el panel ofrece caducados (a veces).

**erhenry** · Mar 28th 2019

Buenos días,

SSOO: Debian 9.5

I-mscp: 1.5.3

Plugin: Lets encrypts.

La web hay veces que me devuelve el certificado caducado ayer y otras veces el certificado renovado. Dominio de ejemplo: https://nuevaalcarria.com

No tiene un patron concreto. Simplemente ocurre despues de visitar 4 o 5 paginas.

SEC_ERROR_EXPIRED_CERTIFICATE

**FloRet88** · Mar 28th 2019

Hello,

Can you please be more exact?

The error will shown in the browser and your certificate is invalid since yesterday!

Which I-MSCP Version (exact build number) and Let´s Encrypt Plugin are you using?

There was a bug with automatically renewal of LE certificates, which should solved since latest versions!

Best regards

**erhenry** · Mar 28th 2019

i-MSCP 1.5.3

Build: 20180516

Codename: Ennio Morricone

LetsEncrypt Versión 3.5.0 (Build 2018071900)

El problema es que al azar, la web carga con el certificado antiguo (caducado ayer) o el certificado nuevo.

The problem is that the web returns the good certificate a few times and other times the expired certificate.

No sé por donde empezar a mirar. Cualquier ayuda es bien recibida. Gracias.

**FloRet88** · Mar 28th 2019

Hello,

i checked your site certificate with following service: https://www.ssllabs.com/ssltes…com&hideResults=on&latest

There you can see, that the certificate is the expired one! I have done the test several times - always the same!

Please clean your browser cache or check the side in hidden mode of your browser!

Can you please post us an screenshot from client side > Domain > Let´s Encrypt?

pasted-from-clipboard.png

Can you please also do a manually renewal of the certificate and check again?

Also, please upgrade to latest I-MSCP Bugfix Release from here: https://github.com/i-MSCP/imsc…ases/tag/1.5.3-2018120800

BTW: You have mixed content on the URL, you should fix that!!

**erhenry** · Mar 28th 2019

The certificate is renew in the control panel.

pasted-from-clipboard.png

But the server sometimes delivers one, and sometimes another. And I do not know why.

**erhenry** · Mar 28th 2019

In your link:

pasted-from-clipboard.png

But, more down the certificate correct appaer:

pasted-from-clipboard.png

**FloRet88** · Mar 28th 2019

Hello,

please revoke and generate a new certificate!

If that doesn´t help, please give us the content of log files.

Best regards

**erhenry** · Mar 28th 2019

I have just done it.

What log files do you want?

Code

KOqkqm57TH2H3eDJAkSnh6/DNFu0Qg==
-----END CERTIFICATE-----
2019-03-28 17:07:43,990:DEBUG:certbot.storage:Archive directory /etc/letsencrypt/archive/nuevaalcarria.com and live directory /etc/letsencrypt/live/nuevaalcarria.com created.
2019-03-28 17:07:43,990:DEBUG:certbot.storage:Writing certificate to /etc/letsencrypt/live/nuevaalcarria.com/cert.pem.
2019-03-28 17:07:43,990:DEBUG:certbot.storage:Writing private key to /etc/letsencrypt/live/nuevaalcarria.com/privkey.pem.
2019-03-28 17:07:43,991:DEBUG:certbot.storage:Writing chain to /etc/letsencrypt/live/nuevaalcarria.com/chain.pem.
2019-03-28 17:07:43,991:DEBUG:certbot.storage:Writing full chain to /etc/letsencrypt/live/nuevaalcarria.com/fullchain.pem.
2019-03-28 17:07:43,991:DEBUG:certbot.storage:Writing README to /etc/letsencrypt/live/nuevaalcarria.com/README.
2019-03-28 17:07:44,093:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer <certbot.cli._Default object at 0x7f9133cf56d0>
2019-03-28 17:07:44,210:DEBUG:certbot.cli:Var webroot_path=/var/www/imscp/gui/plugins/LetsEncrypt/acme (set by user).
2019-03-28 17:07:44,210:DEBUG:certbot.cli:Var webroot_map=set(['webroot_path']) (set by user).
2019-03-28 17:07:45,033:DEBUG:certbot.cli:Var logs_dir=/var/log/letsencrypt (set by user).
2019-03-28 17:07:45,101:DEBUG:certbot.cli:Var webroot_path=/var/www/imscp/gui/plugins/LetsEncrypt/acme (set by user).
2019-03-28 17:07:45,537:DEBUG:certbot.cli:Var work_dir=/var/lib/letsencrypt (set by user).
2019-03-28 17:07:45,699:DEBUG:certbot.cli:Var pref_challs=http-01 (set by user).
2019-03-28 17:07:45,771:DEBUG:certbot.cli:Var authenticator=webroot (set by user).
2019-03-28 17:07:46,687:DEBUG:certbot.storage:Writing new config /etc/letsencrypt/renewal/nuevaalcarria.com.conf.
2019-03-28 17:07:46,689:DEBUG:certbot.reporter:Reporting to user: Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/nuevaalcarria.com/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/nuevaalcarria.com/privkey.pem
Your cert will expire on 2019-06-26. To obtain a new or tweaked version of this certificate in the future, simply run certbot again. To non-interactively renew *all* of your certificates, run "certbot renew"
2019-03-28 17:07:46,690:DEBUG:certbot.reporter:Reporting to user: If you like Certbot, please consider supporting our work by:
Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
Donating to EFF: https://eff.org/donate-le

Display More

**FloRet88** · Mar 28th 2019

YES, and now all is OK!

Please fix also your "MIXED CONTENT" of the Website! On the server side, the newly created cert is active and OK!

Problem solved!

Best regards!

**erhenry** · Mar 28th 2019

It´s not ok.

sometimes yes, and sometimes not.

Certificados renovados, pero el panel ofrece caducados (a veces).

FloRet88 Mar 28th 2019

Share

Daily visitors