[GH-ISSUE #3122] AttributeError: module 'lib' has no attribute 'X509_V_FLAG_CB_ISSUER_CHECK' #2114

Closed
opened 2026-02-26 07:34:05 +03:00 by kerem · 3 comments
Owner

Originally created by @maartenzuidland on GitHub (Aug 13, 2023).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/3122

Checklist

  • Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
    • Yes
  • Are you sure you're not using someone else's docker image?
    • Yes
  • Have you searched for similar issues (both open and closed)?
    • Yes

Describe the bug
[8/13/2023] [5:55:12 PM] [SSL ] › ℹ info Renewing Let'sEncrypt certificates via TransIP for Cert #4: *.<domain.nl>
[8/13/2023] [5:55:12 PM] [SSL ] › ℹ info Command: certbot renew --config "/etc/letsencrypt.ini" --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-4" --disable-hook-validation --no-random-sleep-on-renew
[8/13/2023] [5:55:12 PM] [Express ] › ⚠ warning Command failed: certbot renew --config "/etc/letsencrypt.ini" --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-4" --disable-hook-validation --no-random-sleep-on-renew
Traceback (most recent call last):
File "/usr/bin/certbot", line 5, in
from certbot.main import main
File "/opt/certbot/lib/python3.7/site-packages/certbot/main.py", line 6, in
from certbot._internal import main as internal_main
File "/opt/certbot/lib/python3.7/site-packages/certbot/_internal/main.py", line 21, in
import josepy as jose
File "/opt/certbot/lib/python3.7/site-packages/josepy/init.py", line 40, in
from josepy.json_util import (
File "/opt/certbot/lib/python3.7/site-packages/josepy/json_util.py", line 14, in
from OpenSSL import crypto
File "/opt/certbot/lib/python3.7/site-packages/OpenSSL/init.py", line 8, in
from OpenSSL import crypto, SSL
File "/opt/certbot/lib/python3.7/site-packages/OpenSSL/crypto.py", line 1517, in
class X509StoreFlags(object):
File "/opt/certbot/lib/python3.7/site-packages/OpenSSL/crypto.py", line 1537, in X509StoreFlags
CB_ISSUER_CHECK = _lib.X509_V_FLAG_CB_ISSUER_CHECK
AttributeError: module 'lib' has no attribute 'X509_V_FLAG_CB_ISSUER_CHECK'

Nginx Proxy Manager Version

v2.10.4

To Reproduce
Steps to reproduce the behavior:

  1. Try renewing the *.<domain.nl> certificate
  2. Get "Internal Error"
  3. Open logfiles and see this python error produced.
  4. I did try debugging and reinstalling various python libraries, but this got me further from home, I pulled the latest image again, and it reverted back to the error above.

Expected behavior
Getting a renewed certificate.

Operating System
Docker / Fedora 38

Additional context
I tried to re-install pyopenssl as described in a previous issue, which has fixed the issue in the past, but this time it does not seem to be fixable by that (It uses the latest pyopenssl already).

Originally created by @maartenzuidland on GitHub (Aug 13, 2023). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/3122 <!-- Are you in the right place? - If you are looking for support on how to get your upstream server forwarding, please consider asking the community on Reddit. - If you are writing code changes to contribute and need to ask about the internals of the software, Gitter is the best place to ask. - If you think you found a bug with NPM (not Nginx, or your upstream server or MySql) then you are in the *right place.* --> **Checklist** - Have you pulled and found the error with `jc21/nginx-proxy-manager:latest` docker image? - Yes - Are you sure you're not using someone else's docker image? - Yes - Have you searched for similar issues (both open and closed)? - Yes **Describe the bug** [8/13/2023] [5:55:12 PM] [SSL ] › ℹ info Renewing Let'sEncrypt certificates via TransIP for Cert #4: *.<domain.nl> [8/13/2023] [5:55:12 PM] [SSL ] › ℹ info Command: certbot renew --config "/etc/letsencrypt.ini" --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-4" --disable-hook-validation --no-random-sleep-on-renew [8/13/2023] [5:55:12 PM] [Express ] › ⚠ warning Command failed: certbot renew --config "/etc/letsencrypt.ini" --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-4" --disable-hook-validation --no-random-sleep-on-renew Traceback (most recent call last): File "/usr/bin/certbot", line 5, in <module> from certbot.main import main File "/opt/certbot/lib/python3.7/site-packages/certbot/main.py", line 6, in <module> from certbot._internal import main as internal_main File "/opt/certbot/lib/python3.7/site-packages/certbot/_internal/main.py", line 21, in <module> import josepy as jose File "/opt/certbot/lib/python3.7/site-packages/josepy/__init__.py", line 40, in <module> from josepy.json_util import ( File "/opt/certbot/lib/python3.7/site-packages/josepy/json_util.py", line 14, in <module> from OpenSSL import crypto File "/opt/certbot/lib/python3.7/site-packages/OpenSSL/__init__.py", line 8, in <module> from OpenSSL import crypto, SSL File "/opt/certbot/lib/python3.7/site-packages/OpenSSL/crypto.py", line 1517, in <module> class X509StoreFlags(object): File "/opt/certbot/lib/python3.7/site-packages/OpenSSL/crypto.py", line 1537, in X509StoreFlags CB_ISSUER_CHECK = _lib.X509_V_FLAG_CB_ISSUER_CHECK AttributeError: module 'lib' has no attribute 'X509_V_FLAG_CB_ISSUER_CHECK' **Nginx Proxy Manager Version** <!-- What version of Nginx Proxy Manager is reported on the login page? --> v2.10.4 **To Reproduce** Steps to reproduce the behavior: 1. Try renewing the *.<domain.nl> certificate 2. Get "Internal Error" 3. Open logfiles and see this python error produced. 4. I did try debugging and reinstalling various python libraries, but this got me further from home, I pulled the latest image again, and it reverted back to the error above. **Expected behavior** Getting a renewed certificate. **Operating System** Docker / Fedora 38 **Additional context** I tried to re-install pyopenssl as described in a previous issue, which has fixed the issue in the past, but this time it does not seem to be fixable by that (It uses the latest pyopenssl already).
kerem 2026-02-26 07:34:05 +03:00
  • closed this issue
  • added the
    stale
    bug
    labels
Author
Owner

@robertklep commented on GitHub (Aug 14, 2023):

@maartenzuidland check out this comment

<!-- gh-comment-id:1677736878 --> @robertklep commented on GitHub (Aug 14, 2023): @maartenzuidland check out [this comment](https://github.com/NginxProxyManager/nginx-proxy-manager/issues/2881#issuecomment-1676402836)
Author
Owner

@github-actions[bot] commented on GitHub (Apr 7, 2024):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:2041272150 --> @github-actions[bot] commented on GitHub (Apr 7, 2024): Issue is now considered stale. If you want to keep it open, please comment :+1:
Author
Owner

@github-actions[bot] commented on GitHub (Jun 5, 2025):

Issue was closed due to inactivity.

<!-- gh-comment-id:2942526857 --> @github-actions[bot] commented on GitHub (Jun 5, 2025): Issue was closed due to inactivity.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#2114
No description provided.