1 / 6
Aug 2022

Hallo,

das certbot renew hat gerade nicht mehr funktioniert, weil “Could not choose appropriate plugin: The nginx plugin is not working; there may be problems with your existing configuration.” (siehe unten)
Wir kann ich certbot dazu bringen, den nginx wieder zu finden?

Viele Grüße

Friedemann Bunjes

=================================================================

root@egroupware:/home/administrator# certbot renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log


Processing /etc/letsencrypt/renewal/*********.dyndns.org.conf


Cert is due for renewal, auto-renewing…
Could not choose appropriate plugin: The nginx plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError(“Could not find a usable ‘nginx’ binary. Ensure nginx exists, the binary is executable, and your PATH is set correctly.”)
Attempting to renew cert (*********.dyndns.org) from /etc/letsencrypt/renewal/*********.dyndns.org.conf produced an unexpected error: The nginx plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError(“Could not find a usable ‘nginx’ binary. Ensure nginx exists, the binary is executable, and your PATH is set correctly.”). Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/*********.dyndns.org/fullchain.pem (failure)


All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/*********.dyndns.org/fullchain.pem (failure)


1 renew failure(s), 0 parse failure(s)

=================================================================

root@egroupware:/home/administrator# /usr/bin/certbot renew --nginx --debug-challenges -v
Root logging level set at 10
Saving debug log to /var/log/letsencrypt/letsencrypt.log


Processing /etc/letsencrypt/renewal/*********.dyndns.org.conf


Requested authenticator nginx and installer nginx
Var authenticator=nginx (set by user).
Var installer=nginx (set by user).
Should renew, less than 30 days before certificate expiry 2022-08-29 12:08:46 UTC.
Cert is due for renewal, auto-renewing…
Requested authenticator nginx and installer nginx
No installation (PluginEntryPoint#nginx): Could not find a usable ‘nginx’ binary. Ensure nginx exists, the binary is executable, and your PATH is set correctly.
Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/certbot/plugins/disco.py”, line 132, in prepare
self._initialized.prepare()
File “/usr/lib/python3/dist-packages/certbot_nginx/configurator.py”, line 145, in prepare
"Could not find a usable ‘nginx’ binary. Ensure nginx exists, "
certbot.errors.NoInstallationError: Could not find a usable ‘nginx’ binary. Ensure nginx exists, the binary is executable, and your PATH is set correctly.
No candidate plugin
No candidate plugin
Selected authenticator None and installer None
Could not choose appropriate plugin: The nginx plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError(“Could not find a usable ‘nginx’ binary. Ensure nginx exists, the binary is executable, and your PATH is set correctly.”)
Attempting to renew cert (*********.dyndns.org) from /etc/letsencrypt/renewal/*********.dyndns.org.conf produced an unexpected error: The nginx plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError(“Could not find a usable ‘nginx’ binary. Ensure nginx exists, the binary is executable, and your PATH is set correctly.”). Skipping.
Traceback was:
Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/certbot/renewal.py”, line 465, in handle_renewal_request
main.renew_cert(lineage_config, plugins, renewal_candidate)
File “/usr/lib/python3/dist-packages/certbot/main.py”, line 1187, in renew_cert
installer, auth = plug_sel.choose_configurator_plugins(config, plugins, “certonly”)
File “/usr/lib/python3/dist-packages/certbot/plugins/selection.py”, line 237, in choose_configurator_plugins
diagnose_configurator_problem(“authenticator”, req_auth, plugins)
File “/usr/lib/python3/dist-packages/certbot/plugins/selection.py”, line 341, in diagnose_configurator_problem
raise errors.PluginSelectionError(msg)
certbot.errors.PluginSelectionError: The nginx plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError(“Could not find a usable ‘nginx’ binary. Ensure nginx exists, the binary is executable, and your PATH is set correctly.”)

All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/*********.dyndns.org/fullchain.pem (failure)


All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/*********.dyndns.org/fullchain.pem (failure)


Exiting abnormally:
Traceback (most recent call last):
File “/usr/bin/certbot”, line 11, in
load_entry_point(‘certbot==0.31.0’, ‘console_scripts’, ‘certbot’)()
File “/usr/lib/python3/dist-packages/certbot/main.py”, line 1365, in main
return config.func(config, plugins)
File “/usr/lib/python3/dist-packages/certbot/main.py”, line 1272, in renew
renewal.handle_renewal_request(config)
File “/usr/lib/python3/dist-packages/certbot/renewal.py”, line 490, in handle_renewal_request
len(renew_failures), len(parse_failures)))
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
1 renew failure(s), 0 parse failure(s)

=================================================================

  • created

    Aug '22
  • last reply

    Aug '22
  • 5

    replies

  • 1.4k

    views

  • 3

    users

  • 2

    links

Hmm, ich habe gerade mal auf einem Debian 10 Testsystem mit Nginx und Certbot certbot renew -v aufgerufen, und das hat keinen Fehler gemeldet.

Welches Betriebssystem verwendest Du?
Ich würde mal in den entsprechenden Logs schauen, ob es ein Update von Certbot oder Nginx gab.
Wenn das alles nichts hilft, würde ich mal ein Update von Certbot auf deren aktuelle Version (z.B. per Snap) versuchen.

Ralf

Hallo Ralf,

Danke für die schnelle Antwort.

Linux egroupware 4.19.0-20-amd64 #1 SMP Debian 4.19.235-1 (2022-03-17) x86_64

Gibt es eine Anleitung für den certbot-update?

Grüße

Friedemann

Hi Friedemann.

Hat also mal funktioniert oder ist das eine Neuinstallation?

Debian 10 mit certbot wie hier beschrieben?:


Ist mir so noch nicht unter gekommen. Das funktioniert eigentlich dauerhaft zuverlässig (automatisch).

Zwar ungern, aber wenn dem ein plugin fehlt:
certbot deinstallierten, neuinstallieren, ausführen

Aber bitte nur mit System-Sicherung…

Das Netz kennt eine Menge Fehlermeldungen wie deine. Aber meist im Zusammenhang mit Snap.

Stefan

Hallo,

certbot de- und neuinstallation via snap hat funktioniert:

  • snap install core
  • apt remove certbot
  • ln -s /snap/bin/certbot /usr/bin/certbot
  • certbot --nginx

Danke für die Unterstützung!

Viele Grüße

Friedemann Bunjes