# SSL Certificates Expired

**URL:** <https://forum.yunohost.org/t/ssl-certificates-expired/13131>\
**Category:** Support\
**Tags:** raspberrypi, english\
**Created:** [November 1, 2020, 2:22pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131 "2020-11-01T14:22:29Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![lopeztel](https://forum.yunohost.org/user_avatar/forum.yunohost.org/lopeztel/32/3322_2.png) [@lopeztel](https://forum.yunohost.org/u/lopeztel)\
**Post date:** [November 1, 2020, 2:22pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/1 "2020-11-01T14:22:30Z")

</div>

### My YunoHost server

**Hardware:** Raspberry Pi 4 at home  
**YunoHost version:** 4.0.8  
**I have access to my server :** Through SSH (not anymore) | through the webadmin | direct access via keyboard / screen | …  
**Are you in a special context or did you perform some particular tweaking on your YunoHost instance ?** : no

### Description of my issue

Hello, thanks for this amazing project.

Just today I found myself locked out because it looks like my SSL certificates have expired, can’t access using Firefox web browser, had to use Chromium to access the admin web portal.

I haven’t been able to troubleshoot myself, I’ve tried the solution listed [here](https://forum.yunohost.org/t/lets-encrypt-certificate-has-expired-and-cannot-be-renewed/9744) but renewing or installing a Let’s Encrypt certificate (after reverting to self-signed) fails, see log [here](https://paste.yunohost.org/raw/xosujujiso)

According to the log there seems to be a problem with the IP, but according to whats my IP it looks like the global IP is correct.

I would really appreciate some pointers or help!!

---

<div class="post-metadata">

**Author:** ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)\
**Post date:** [November 1, 2020, 3:07pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/2 "2020-11-01T15:07:54Z")

</div>

Do you happen to have an app installed at the root of your domain ? (Or maybe set as default app?)

---

<div class="post-metadata">

**Author:** ![lopeztel](https://forum.yunohost.org/user_avatar/forum.yunohost.org/lopeztel/32/3322_2.png) [@lopeztel](https://forum.yunohost.org/u/lopeztel)\
**Post date:** [November 1, 2020, 3:29pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/3 "2020-11-01T15:29:45Z")

</div>

Hi thanks for the quick reply!

I guess I should elaborate more, I am using 2 domains: a [noho.st](http://noho.st) one and a .xyz (the .xyz domain has the same issue):

On the [noho.st](http://noho.st) domain I have some apps installed but not at the root, root redirects you to .noho.st/yunohost/sso/

The .xyz domain has my wordpress blog installed at the root

---

<div class="post-metadata">

**Author:** ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)\
**Post date:** [November 1, 2020, 3:35pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/4 "2020-11-01T15:35:32Z")

</div>

Annnnd would you happen to have the “multi-site” option enabled maybe ? (On the wordpress?)

---

<div class="post-metadata">

**Author:** ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)\
**Post date:** [November 1, 2020, 3:38pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/5 "2020-11-01T15:38:18Z")

</div>

Anyway … not sure why this really happens and that’s a bit annoying to see this bug happening again because we thought it would be fixed … but naively I would try something like :

```auto
mv /etc/nginx/conf.d/yourdomain.tld.d/wordpress.conf{,.bkp}
nginx -t && systemctl reload nginx

```

… then retry to renew the certificate …

then restablish the wordpress conf with :

```auto
mv /etc/nginx/conf.d/yourdomain.tld.d/wordpress.conf{.bkp,}
nginx -t && systemctl reload nginx

```

(of course don’t forget to replace ‘yourdomain.tld’ by your actual domain name)

---

<div class="post-metadata">

**Author:** ![lopeztel](https://forum.yunohost.org/user_avatar/forum.yunohost.org/lopeztel/32/3322_2.png) [@lopeztel](https://forum.yunohost.org/u/lopeztel)\
**Post date:** [November 1, 2020, 3:42pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/6 "2020-11-01T15:42:45Z")

</div>

As far as I know no “multi-site” option is enabled. since this is on **somename**.xyz would it affect all the stuff on **somename**.noho.st ?

---

<div class="post-metadata">

**Author:** ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)\
**Post date:** [November 1, 2020, 3:48pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/7 "2020-11-01T15:48:20Z")

</div>

Hmmnah i don’t think so … not 100% sure what this option is about exactly but that’s something like being able to have multiple site on a single blog but it’s not cross-domain … (not really sure about what i’m saying)

---

<div class="post-metadata">

**Author:** ![lopeztel](https://forum.yunohost.org/user_avatar/forum.yunohost.org/lopeztel/32/3322_2.png) [@lopeztel](https://forum.yunohost.org/u/lopeztel)\
**Post date:** [November 1, 2020, 3:51pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/8 "2020-11-01T15:51:56Z")

</div>

just tried your suggestion on the **somename**.xyz wordpress blog, no changes, here’s the [log](https://paste.yunohost.org/raw/ayoduhahuk)

Also I noticed that this didn’t make it into the log:

> Could not sign the new certificate
> 
> Traceback (most recent call last):  
> File “/usr/lib/moulinette/yunohost/certificate.py”, line 388, in certificate\_renew  
> \_fetch\_and\_enable\_new\_certificate(domain, staging, no\_checks=no\_checks)  
> File “/usr/lib/moulinette/yunohost/certificate.py”, line 535, in \_fetch\_and\_enable\_new\_certificate  
> raise YunohostError(‘certmanager\_cert\_signing\_failed’)  
> YunohostError: Could not sign the new certificate

---

<div class="post-metadata">

**Author:** ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)\
**Post date:** [November 1, 2020, 4:02pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/9 "2020-11-01T16:02:16Z")

</div>

eeeeh so the first log you mentionned was about maindomain.tld but now it’s about domain2.tld (or viversa) ? Sooo uuuuh

---

<div class="post-metadata">

**Author:** ![lopeztel](https://forum.yunohost.org/user_avatar/forum.yunohost.org/lopeztel/32/3322_2.png) [@lopeztel](https://forum.yunohost.org/u/lopeztel)\
**Post date:** [November 1, 2020, 4:07pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/10 "2020-11-01T16:07:51Z")

</div>

First log is about domain 1 (_somename_.noho.st), then as you suggested the worpress fix, I applied it to domain 2 (_somename_.xyz). So yes, 2 logs.

Domain 2 still has an active SSL certificate, which expires in 9 days.  
Since I will have domain 1’s problem on domain 2 in 9 days I also tried to manually renew its SSL certificate, which yields a very similar result to trying to do the same on domain 1

---

<div class="post-metadata">

**Author:** ![system](https://forum.yunohost.org/uploads/default/original/2X/f/f59fe8e3ee6b100b4f574d30d6e30479c68b89f0.png) [@system](https://forum.yunohost.org/u/system)\
**Post date:** [November 16, 2020, 4:07pm UTC](https://forum.yunohost.org/t/ssl-certificates-expired/13131/11 "2020-11-16T16:07:54Z")

</div>

Closed on November 16, 2020, 4:07pm UTC

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.
