| SYSTEM INFORMATION | |
|---|---|
| OS type and version | EL10 |
| Webmin version | 2.660 |
This thread is marked as Solved but there has been no mention that it is being fixed, or if there will be apart from the bandaid discovered by OP .
Auto-renew is still broken too.
Hi,
Can you provide more details? What exact error are you seeing in your setup?
It’s in that thread. So I followed OP advice:
In Webmin > Webmin Configuration > Module Config > ACME provider configuration, " Re-use existing certificate keys?" was set to “yes”. I changed it to “no”.
That allowed me to get a new certificate. I have the same question in that thread - set it back after?
If that is to be the only solution then it is indeed Solved.
[I know separate problem = separate thread, but ]
There is also a problem with enabling automatic renewal in Webmin 2.660.
I found another server with a certificate issued 25/06/2026 and expiring 23/09/2026. The system Certbot timer is running normally, but Certbot does not renew it because Webmin originally created the lineage with:
autorenew = False
Webmin’s SSL Certificate page is set to Only renew manually.
I changed this to an automatic renewal interval and selected Just Update Renewal, but Webmin refused with:
Failed to request certificate :
An ACME directory URL must be entered when using External Account Binding
This server is using normal Let’s Encrypt and does not use External Account Binding. The stored Webmin configuration confirms both EAB fields are empty:
/etc/webmin/webmin/config:
letsencrypt_eab_kid=
letsencrypt_eab_hmac=
The Webmin UI likewise shows EAB Key ID = None. The HMAC field displays “Don’t change”; selecting “Set to”, leaving it blank and saving simply returns it to “Don’t change”.
So Just Update Renewal appears to be incorrectly triggering EAB validation despite no EAB credentials being configured. This prevents changing an existing certificate from manual-only to automatic renewal through the Webmin UI.
This is separate from the 2048-bit --reuse-key / 4096-bit key-size problem described above, , but unless I set Reuse key to false then any renewal will still fail if it ever gets to try and renew.
At least I now know what to expect and how to manually get the LE cert done. This gives a chance for any possible fix before it trips up other users.
The key-reuse/key-size issue is already fixed, and Webmin 2.670 will include the fix for both manual and automatic renewals.
It also fixes the SSL key-size setting not being restored in the form. And, you can leave key reuse disabled until then.
An EAB-related bug is fixed in this patch (don’t mind the commit message):