[GH-ISSUE #496] Renewal fails #422

Closed
opened 2026-02-26 06:32:48 +03:00 by kerem · 3 comments
Owner

Originally created by @oywino on GitHub (Jul 10, 2020).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/496

NPM fails to renew a valid Let's Encrypt certificate with the message "Internal Error".
I'm running Nginx 1.14.2 and I have used it to obtain a valid Let's encrypt certificate that is about to expire. So it's time to renew.
The certificate has been in use for almost three months with no problems what so ever.
Prior to renewal, my firewall is set to point to the server where NPM is running with 80 --> 35080 and 443 --> 35443
This is the output on the console when renewal fails:

[2020-7-10] [21:37:19] [SSL      ] › ℹ  info      Renewing Let'sEncrypt certificates for Cert #1: xxxxx.yyyy.com                                      
[2020-7-10] [21:37:21] [Express  ] › ⚠  warning   Command failed: /usr/bin/certbot renew --non-interactive --config "/etc/letsencrypt.ini" --cert-name "n
pm-1" --preferred-challenges "dns,http" --disable-hook-validation                                                                                        
Saving debug log to /config/log/letsencrypt/letsencrypt.log                                                                                              
                                                                                                                                                         
Traceback (most recent call last):                                                                                                                       
  File "/usr/lib/python3.6/site-packages/certbot/renewal.py", line 67, in _reconstitute renewal_candidate = storage.RenewableCert(full_path, config) 
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 461, in __init__self._check_symlinks()                                                                                                                               
  File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 520, in _check_symlinks "expected {0} to be a symlink".format(link)) certbot.errors.CertStorageError: expected /etc/letsencrypt/live/npm-1/cert.pem to be a symlink                                                           
Renewal configuration file /etc/letsencrypt/renewal/npm-1.conf is broken. Skipping.                                                                      
0 renew failure(s), 1 parse failure(s) 

I really do need some help here to find out why renewal fails.
Many thanks in advance.

Originally created by @oywino on GitHub (Jul 10, 2020). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/496 NPM fails to renew a valid Let's Encrypt certificate with the message "Internal Error". I'm running Nginx 1.14.2 and I have used it to obtain a valid Let's encrypt certificate that is about to expire. So it's time to renew. The certificate has been in use for almost three months with no problems what so ever. Prior to renewal, my firewall is set to point to the server where NPM is running with 80 --> 35080 and 443 --> 35443 This is the output on the console when renewal fails: ``` [2020-7-10] [21:37:19] [SSL ] › ℹ info Renewing Let'sEncrypt certificates for Cert #1: xxxxx.yyyy.com [2020-7-10] [21:37:21] [Express ] › ⚠ warning Command failed: /usr/bin/certbot renew --non-interactive --config "/etc/letsencrypt.ini" --cert-name "n pm-1" --preferred-challenges "dns,http" --disable-hook-validation Saving debug log to /config/log/letsencrypt/letsencrypt.log Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/certbot/renewal.py", line 67, in _reconstitute renewal_candidate = storage.RenewableCert(full_path, config) File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 461, in __init__self._check_symlinks() File "/usr/lib/python3.6/site-packages/certbot/storage.py", line 520, in _check_symlinks "expected {0} to be a symlink".format(link)) certbot.errors.CertStorageError: expected /etc/letsencrypt/live/npm-1/cert.pem to be a symlink Renewal configuration file /etc/letsencrypt/renewal/npm-1.conf is broken. Skipping. 0 renew failure(s), 1 parse failure(s) ``` I really do need some help here to find out why renewal fails. Many thanks in advance.
kerem 2026-02-26 06:32:48 +03:00
Author
Owner

@pantherale0 commented on GitHub (Jul 10, 2020):

See #396

<!-- gh-comment-id:656885225 --> @pantherale0 commented on GitHub (Jul 10, 2020): See #396
Author
Owner

@oywino commented on GitHub (Jul 11, 2020):

Thanks for the tip.
I see that a lot of others have similar problem - and no one has found a solution.
That's really sad.

<!-- gh-comment-id:657005087 --> @oywino commented on GitHub (Jul 11, 2020): Thanks for the tip. I see that a lot of others have similar problem - and no one has found a solution. That's really sad.
Author
Owner

@chaptergy commented on GitHub (May 12, 2021):

Unfortunately, yes. But I'll close this as a duplicate of https://github.com/jc21/nginx-proxy-manager/issues/396.

<!-- gh-comment-id:839832998 --> @chaptergy commented on GitHub (May 12, 2021): Unfortunately, yes. But I'll close this as a duplicate of https://github.com/jc21/nginx-proxy-manager/issues/396.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#422
No description provided.