Let's Encrypt SSL certificate renewal broken

Hello! My TKL WordPress 15.3 instance starting throwing certifcate errors this morning. Nothing seemed out of the ordinary, so I tried rebooting the server. That did not change anything. I then tried to request a new SSL certificate but encountered the following error messages (please see screenshot). I have tried this multiple times without success. Please advise.

Thanks!

Rob

Replies (6)

Trying again to attach the screenshot with error messages

Reply 1 2019-11-20

I'm not seeing the screenshot that I uploaded, so I'm trying again.

It's a known issue

Reply 2 2019-11-20

Let's Encrypt have changed a few things and it's broken our integration.

Please update Dehydrated and install the latest version of Confconsole as per the release notes. If you have any problems, please post back.

You're most welcome! :)

Reply 3 2019-11-20

You're most welcome! :)

Got it

Reply 4 2019-11-20

Thank you very much for your quick and helpful reply!

Hey Rob, heads up on an issue with the update...

Reply 5 2019-12-04

It's been bought to my attention that after installing the v1.1.1 Confconsole update, the add-water service is being inadvertently enabled. That means that on reboot, it will start up and will likely block Apache (or any other webserver) from starting!

The fix is easy:

systemctl disable add-water

Please note that on any server where you have already run the v1.1.1 update, you need to apply the above line and there is no value in updating to the newer package. For any new servers you launch though (or for anyone else who hasn't applied any fixes and stumbles across this thread) the newer v1.1.2 release resolves this issue (it's exactly that same as v1.1.1, but doesn't auto enable the add-water service on install).

Hooray!

Reply 6 2019-12-04

Thank you very much for the fix and update!