Server out, not reachable except ssh

Support
1

I have searched the forum for similar issues

on

This category is for general issues(=something is broken) regarding YunoHost, NOT apps.

on

This form is written in English but feel free to write in French if you’re more comfortable!

on

What type of hardware are you using

Raspberry Pi 3, 4+

What YunoHost version are you running

12.1.15

How are you able to access your server

SSH

Are you in a special context or did you perform specific tweaking on your YunoHost instance ?

No

Describe your issue

Hi,

This morning I couldn’t access my server on the web, just using ssh.

It seems that nginx can not be started:

sudo yunohost service restart nginx
Job for nginx.service failed because the control process exited with error code.
See "systemctl status nginx.service" and "journalctl -xeu nginx.service" for details.
WARNING Could not execute the command 'systemctl restart nginx'
ERROR Oct 02 13:20:24 nginx[1815]: nginx: configuration file /etc/nginx/nginx.conf test failed
Oct 02 13:20:24 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
Oct 02 13:20:24 systemd[1]: nginx.service: Failed with result 'exit-code'.
Oct 02 13:20:24 systemd[1]: Failed to start nginx.service - A high performance web server and a reverse proxy server.
Oct 02 13:44:16 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...
Oct 02 13:44:16 nginx[16408]: 2026/10/02 13:44:16 [warn] 16408#16408: duplicate extension "wasm", content type: "application/wasm", previous content type: "application/wasm" in /etc/nginx/conf.d/arnauld.org.d/nextcloud.conf:9
Oct 02 13:44:16 nginx[16408]: 2026/10/02 13:44:16 [emerg] 16408#16408: cannot load certificate "/etc/yunohost/certs/influxdb.arnauld.org/crt.pem": PEM_read_bio_X509_AUX() failed (SSL: error:0480006C:PEM routines::no start line:Expecting: TRUSTED CERTIFICATE)
Oct 02 13:44:16 nginx[16408]: nginx: configuration file /etc/nginx/nginx.conf test failed
Oct 02 13:44:16 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
Oct 02 13:44:16 systemd[1]: nginx.service: Failed with result 'exit-code'.
Oct 02 13:44:16 systemd[1]: Failed to start nginx.service - A high performance web server and a reverse proxy server.
-- Boot 729f792a26da4b77bb81c8e8a28d4a9c --
Oct 02 13:51:27 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...
Oct 02 13:51:28 nginx[1936]: 2026/10/02 13:51:27 [warn] 1936#1936: duplicate extension "wasm", content type: "application/wasm", previous content type: "application/wasm" in /etc/nginx/conf.d/arnauld.org.d/nextcloud.conf:9
Oct 02 13:51:28 nginx[1936]: 2026/10/02 13:51:27 [emerg] 1936#1936: cannot load certificate "/etc/yunohost/certs/influxdb.arnauld.org/crt.pem": PEM_read_bio_X509_AUX() failed (SSL: error:0480006C:PEM routines::no start line:Expecting: TRUSTED CERTIFICATE)
Oct 02 13:51:28 nginx[1936]: nginx: configuration file /etc/nginx/nginx.conf test failed
Oct 02 13:51:28 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
Oct 02 13:51:28 systemd[1]: nginx.service: Failed with result 'exit-code'.
Oct 02 13:51:28 systemd[1]: Failed to start nginx.service - A high performance web server and a reverse proxy server.
Oct 02 13:57:56 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...
Oct 02 13:57:56 nginx[8743]: 2026/10/02 13:57:56 [warn] 8743#8743: duplicate extension "wasm", content type: "application/wasm", previous content type: "application/wasm" in /etc/nginx/conf.d/arnauld.org.d/nextcloud.conf:9
Oct 02 13:57:56 nginx[8743]: 2026/10/02 13:57:56 [emerg] 8743#8743: cannot load certificate "/etc/yunohost/certs/influxdb.arnauld.org/crt.pem": PEM_read_bio_X509_AUX() failed (SSL: error:0480006C:PEM routines::no start line:Expecting: TRUSTED CERTIFICATE)
Oct 02 13:57:56 nginx[8743]: nginx: configuration file /etc/nginx/nginx.conf test failed
Oct 02 13:57:56 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
Oct 02 13:57:56 systemd[1]: nginx.service: Failed with result 'exit-code'.
Oct 02 13:57:56 systemd[1]: Failed to start nginx.service - A high performance web server and a reverse proxy server.
ERROR Could not restart the service 'nginx'

I also rebooted but no success.

Share relevant logs or error messages

2

What does

sudo yunohost domain cert status influxdb.arnauld.org

return ?

3 
sudo yunohost domain cert status influxdb.arnauld.org
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/yunohost/certificate.py", line 660, in _get_status
    cert = crypto.load_certificate(crypto.FILETYPE_PEM, open(cert_file).read())
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 2022, in load_certificate
    _raise_current_error()
  File "/usr/lib/python3/dist-packages/OpenSSL/_util.py", line 57, in exception_from_error_queue
    raise exception_type(errors)
OpenSSL.crypto.Error: [('PEM routines', '', 'no start line')]
ERROR Something wrong happened when trying to open current certificate for domain influxdb.arnauld.org (file: /etc/yunohost/certs/influxdb.arnauld.org/crt.pem), reason: [('PEM routines', '', 'no start line')]
4

Is it a self-signed certificate ?

5

No, it’s a Let’s Encrypt one.

6

Maybe you can try renewing it

sudo yunohost domain cert renew influxdb.arnauld.org --force
7 
sudo yunohost domain cert renew influxdb.arnauld.org --force
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/yunohost/certificate.py", line 660, in _get_status
    cert = crypto.load_certificate(crypto.FILETYPE_PEM, open(cert_file).read())
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 2022, in load_certificate
    _raise_current_error()
  File "/usr/lib/python3/dist-packages/OpenSSL/_util.py", line 57, in exception_from_error_queue
    raise exception_type(errors)
OpenSSL.crypto.Error: [('PEM routines', '', 'no start line')]
ERROR Something wrong happened when trying to open current certificate for domain influxdb.arnauld.org (file: /etc/yunohost/certs/influxdb.arnauld.org/crt.pem), reason: [('PEM routines', '', 'no start line')]
8

Try editing it

sudo nano /etc/yunohost/certs/influxdb.arnauld.org/crt.pem

adding

-----BEGIN CERTIFICATE-----

if missing.

9

Thank you for your help.

I solved the problem with moving the certificate, installing a self-signed one and finally getting the real Let’s Encrypt certificate.

At least I think I did this… :slight_smile: