SSL Renew Problem

v4
#1

Hi Guys Im having major SSL problems

This is an error message received in response to this command.

ee site ssl www.site.com

Starting SSL verification.
Warning: Failed to verify SSL: cURL error 60: SSL certificate problem: certificate has expired (see http://curl.haxx.se/libcurl/c/libcurl-errors.html)
Warning: Check logs and retry ee site ssl www.site.com once the issue is resolved.
root@vps646871:~#

Im also continually getting this
Error: Site www.atomizers.com.au already contains SSL.

Any guidance appreciated …causing downtime.

#2

have the same issue too. latest v4 version, certificate has expired and can’t figure out a way to renew it

any help would be appreciated

#3

Try this and see if it gives you the same error.

ee site ssl-renew --all
#4

it does, i’ve tried every command suggested here

ee site ssl-renew site
ee site ssl-renew --all

ee site update www.site . com --le=off
Error: Site www.site . com already contains SSL.

./letsencrypt-auto certonly --webroot -w /opt/easyengine/sites/www.site.com/app/htdocs/ -d site . com -d www.site . com --email [email protected] --text --agree-tos runs into acme well-known issue

and so on.

as time is of an essence here, i’ll PP $100 to the person that provides working solution to this issue.

#5

Tried adding --force ?

Not sure if this is the cause but just incase, have you also added a CAA dns record?

#6

yep tried --force. dns is sound

thanks for suggestion. currently i’m backing up WP, deleting site and re-creating it…

#7

Sorry to hear and hope you get sorted.
I have a few issues myself with non-intentional redirection and SSL not renewing itself so probably gonna abandon ship to runcloud and see what the fuss is about while the issues get sorted out in ee4.

#8

did the same, moved important sites to sendgrid and for less important re-created under ee

#9

Same here:

Starting SSL verification.
PHP Fatal error:  Uncaught GuzzleHttp\Exception\RequestException: cURL error 60: SSL certificate problem: certificate has expired (see http://curl.haxx.se/libcurl/c/libcurl-errors.html) in phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php:186
Stack trace:
#0 phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php(149): GuzzleHttp\Handler\CurlFactory::createRejection(Object(GuzzleHttp\Handler\EasyHandle), Array)
#1 phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php(102): GuzzleHttp\Handler\CurlFactory::finishError(Object(GuzzleHttp\Handler\CurlHandler), Object(GuzzleHttp\Handler\EasyHandle), Object(GuzzleHttp\Handler\CurlFactory))
#2 phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlHandler.php(43): GuzzleHttp\Handler\CurlFactory::finish(Object(GuzzleHttp\Handler\CurlHandler), Object(GuzzleHttp\Handler\EasyHandle), Object(GuzzleHttp\Handler\CurlFactory))
#3 phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/Proxy.php(28): Guz in phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php on line 186
Warning: An Error occurred. Initiating clean-up.
Warning: Exiting gracefully after rolling back. This may take some time.
Success: Rollback complete. Exiting now.

On sudo ee site ssl-renew xxx.com
Version: EE v4.0.14
Unfortunately, I am quite disappointed with the EE v4. It’s quite slow (maybe due to the docker containers, which should be no problem), tutorials and commands are outdated (but still on the website), dockers run as root, elementary commands do not work reliably. Is there any reliable alternative to easyengine?

#11

Hi Guys,

I found the solution to this problem in this thread.


Hope it helps you also.

Stuart

2 Likes
#12

Unfortunately I’ve had the exact same experience with EE v4. I’ve starting using SpinupWP by Delicious Brains (fantastic). Also tried Runcloud and it worked well, but wasn’t as focused on WordPress.

EasyEngine was awesome, but the reality is that any excellent solution is going to cost some money unless it’s being subsidized by an enormous corporation. As rtCamp has grown (well deserved success!), the EE project has gotten less love than before. As you point out, patchy docs and incomplete features are examples of that.

I would love to see rtCamp offer EE has a paid solution, a la Runcloud, SpinupWP, ServerPilot, etc. It’s clear that as a free side project it’s not what it once was. And that’s not really anybody’s fault.

#13

EE is great.

SSL problems are an easy fix:
1. You can be careful and pay attention to your emails when the Let’s Encrypt informs you about ssl expiration, and simply renew your ssl before it expires.
Or
2. you can add a simple cron command which will run the ssl renew command few weeks before expiration - Done!

If you let it expire, your options are to simply redeploy the server/website. It takes a lot less time than to write posts of how unsatisfied you are with ee.

I was in the same situation. Then I redeployed server/deleted my website, and added it again.
Took me less than an hour. (with my methods)
Cheers

#14

Hey Guys,

Just a heads up for people that fail with this method. I find that it fails if you try to keep the old file as in.
mv oldfile.crt oldfile.crtBAK

But it will work if you delete it.

and then run ee site ssl-renew site.com --force

2 Likes
#15

Just switch to WordOps engine (improved EE3 version and added missing features). It works very well.

#16

That works indeed! Thanks!

#17

Give me Solution for this anyone facing this issue

#19

Thnx, its works

#20

This got solved for me when I updated to EE v4.1.1

Had exactly the same error from curl that it was expired.

Before the update

user@server:~$ sudo ee site ssl-renew --all --force
Starting SSL cert renewal
Loading current certificate for mydomain.com
Starting SSL verification.
PHP Fatal error:  Uncaught GuzzleHttp\Exception\RequestException: cURL error 60: SSL certificate problem: certificate has expired (see http://curl.haxx.se/libcurl/c/libcurl-errors.html) in phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php:186
Stack trace:
#0 phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php(149): GuzzleHttp\Handler\CurlFactory::createRejection(Object(GuzzleHttp\Handler\EasyHandle), Array)
#1 phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php(102): GuzzleHttp\Handler\CurlFactory::finishError(Object(GuzzleHttp\Handler\CurlHandler), Object(GuzzleHttp\Handler\EasyHandle), Object(GuzzleHttp\Handler\CurlFactory))
#2 phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlHandler.php(43): GuzzleHttp\Handler\CurlFactory::finish(Object(GuzzleHttp\Handler\CurlHandler), Object(GuzzleHttp\Handler\EasyHandle), Object(GuzzleHttp\Handler\CurlFactory))
#3 phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/Proxy.php(28): Guz in phar:///usr/local/bin/ee/vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php on line 186
Warning: An Error occurred. Initiating clean-up.
Warning: Exiting gracefully after rolling back. This may take some time.
Success: Rollback complete. Exiting now.

After the update:

user@server:~$ sudo ee cli update
Note: It is recommended to run EasyEngine update in tmux/screen. Update at times may take some time.
To view progress, tail logs in a different window using `tail -f /opt/easyengine/logs/ee.log`.
You have version 4.0.14. Would you like to update to 4.1.1? [y/n] y
Downloading from https://github.com/EasyEngine/easyengine/releases/download/v4.1.1/easyengine.phar...
md5 hash verified: d4300527b59d0c8d0c4141bafb340e24
Updating EasyEngine to new version. This might take some time.
New version works. Proceeding to replace.
Success: Updated EE to 4.1.1.
user@server:~$ sudo ee site ssl-renew --all --force
Starting SSL cert renewal
Loading current certificate for mydomain.com
Current certificate is alerady expired on 2020-02-17 10:41:09, renewal is necessary.
Enabling site mydomain.com.
Success: Site mydomain.com enabled.
#21