LE not renewing automatically in Webmin

the only thing i see is in miniserv.error, after changing the auto renew increment and pressing update renewal:
[29/Jul/2019:15:15:55 -0500] Reloading configuration
Use of uninitialized value in string eq at ./webmin-lib.pl line 1869.



upon tracking down webmin-lib.pl, lines 1829 - 1871 read:
sub cert_info
{
my %rv;
local $;
open(OUT, "openssl x509 -in ".quotemeta($
[0])." -issuer -subject -enddate -text |");
while() {
s/\r|\n//g;
if (/subject=.CN\s=\s*([^/]+)/) {
$rv{‘cn’} = $1;
}
if (/subject=.O\s=\s*([^/]+)/) {
$rv{‘o’} = $1;
}
if (/subject=.Email\s=\s*([^/]+)/) {
$rv{‘email’} = $1;
}
if (/issuer=.CN\s=\s*([^/]+)/) {
$rv{‘issuer_cn’} = $1;
}
if (/issuer=.O\s=\s*([^/]+)/) {
$rv{‘issuer_o’} = $1;
}
if (/issuer=.Email\s=\s*([^/]+)/) {
$rv{‘issuer_email’} = $1;
}
if (/notAfter\s*=\s*(.*)/) {
$rv{‘notafter’} = $1;
}
if (/Subject\s+Alternative\s+Name/i) {
my $alts = ;
$alts =~ s/^\s+//;
foreach my $a (split(/[, ]+/, $alts)) {
if ($a =~ /^DNS:(\S+)/) {
push(@{$rv{‘alt’}}, $1);
}
}
}
}
close(OUT);
$rv{‘type’} = $rv{‘o’} eq $rv{‘issuer_o’} ? $text{‘ssl_typeself’}
: $text{‘ssl_typereal’};
return %rv;
}



is that of any help?

and yes, other scheduled stuff happens.

back over in webmin - system - scheduled cron jobs, i dont see any reference to anything about LE/certbot. what command am i looking for in the list?

bump

bump

bump

Hi,

Typically wnen LE has problems renewing, I’ve found that there is at least one problematic domain on the server which halts the renewal of other domains. I would suggest checking the validity of each domain, to see if one of them is the culprit.

If you’d like to setup a private session, I can go through your server and diagnose what is going on. Send me an email if you’d like to discuss this option.

each name on the certificate resolves just fine. does that confirm validity?

Hi,

How many domains are being hosted?

there are 5 sans on the certificate in question.

Hi,

If you’re on Skype, drop me a message.

bump

Oh, a thought just came up. This is a “just in case” mention, that I mention in case it helps.

I once had a relatively similar situation with virtualmin: impossible to renew a certificate with no error message to tell there was a problem.

That was because I did something wrong with a config file, and the system was smart enough to verify if config files were good and would have allowed Apache to properly restart once it was shut down. As the answer was “nope, root is stupid and screwed up again”, Apache wasn’t allowed to restart. However, that didn’t generate an explanation in virtualmin, the renewal procedure seemed like it was going through, although it didn’t, as an Apache restart was required to finalize and apply the changes.

I discovered the problem myself after, being paranoid and all, I tried to restart Apache by ssh, and understood. Once the problem with the config file was fixed, apache was able to restart on demand, and virtualmin properly applied the certificate renewal.

I doubt that’s your problem, but, hey, who can tell!

apache restarted via ssh. certificate due to be renewed next week. we’ll see.

still no joy. about to celebrate 2 years of manually renewing. :frowning:

bump

bump

bump

IF GPL License you could try payed Support ticket.?

Or TPNSOLUTIONs… payed support / training

bump

Can i clarify,

Is this just tue auto renew for your webmin server domain itself? (You say in title “webmin” not auto renewing)

So all your virtualmin virtual server certificates are auto renewing?