Renew letsencrypt wildcard certs

1

It seems that sudo bench renew-lets-encrypt doesn’t work for certs created with bench wildcard-ssl. All my sites using wildcard certs are failed to renew.
Failure message:

Could not choose appropriate plugin: The manual plugin is not working; there may be problems with your existing configuration.
The error was: PluginError('An authentication script must be provided with --manual-auth-hook when using the manual plugin non-interactively.',)
Attempting to renew cert (integria.id) from /etc/letsencrypt/renewal/integria.id.conf produced an unexpected error: The manual plugin is not working; there may be problems with your existing configuration.
The error was: PluginError('An authentication script must be provided with --manual-auth-hook when using the manual plugin non-interactively.',). Skipping.
The following certs could not be renewed:
  /etc/letsencrypt/live/integria.id/fullchain.pem (failure)

Anyone can confirm this?
Or having solution?

Thank you

2

To renew wildcard lets encrypt ssl, I use the command to make new ssl:

sudo bench setup wildcard-ssl

Use the same wildcard domain as existing ssl (e.g use *.domain.com if you currently has the ssl use the star symbol, or not if you don’t).

The certbot will detect the existing ssl and know if it needs to renew.
Follow the instruction, including the adding TXT entry in DNS record.

If then the nginx fail to reload, check the name of the cert in the sites/common_site_config.json
config/nginx.conf
etc/letsencrypt/live
are all match.

2 Likes