Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Letsencrypt renew certs doesn't work in standalone installation (by quick install guide)

See original GitHub issue

After install by “Jitsi Meet quick install”, letsencrypt renew doesn’t work.

https://github.com/jitsi/jitsi-meet/blob/master/doc/quick-install.md#generate-a-lets-encrypt-certificate

1. First problem. Crontab task:

#!/bin/bash
/usr/local/sbin/certbot-auto renew >> /var/log/le-renew.log

Get this error:

-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/***.conf
-------------------------------------------------------------------------------
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator standalone, Installer None
Renewing an existing certificate
Performing the following challenges:
tls-sni-01 challenge for ***
Cleaning up challenges
Attempting to renew cert (***) from /etc/letsencrypt/renewal/***.conf produced an unexpected error: Problem binding to port 443: Could not bind to IPv4 or IPv6.. Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/***/fullchain.pem (failure)

-------------------------------------------------------------------------------

All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/***/fullchain.pem (failure)
-------------------------------------------------------------------------------
1 renew failure(s), 0 parse failure(s)

Reason: jitsi already busy 443 port.

2. Second problem:

After:

service jitsi-videobridge stop

and update certs jitsu-meet still not using renewal certs.

Reason - no phase for converting ssl keys again https://github.com/jitsi/jitsi-meet/blob/master/resources/install-letsencrypt-cert.sh#L89-L98

Issue Analytics

State:
Created 5 years ago
Reactions:1
Comments:12 (3 by maintainers)

Top GitHub Comments

3reactions

damenchocommented, Apr 27, 2018

Some time ago I was working on this to update the renew procedure but didn’t have time to fix/test it. https://github.com/jitsi/jitsi-meet/tree/letsencrypt-renew But now based on your comments I see that my renew script is missing the phase for converting ssl keys. So this needs updating. This is still on my TODO list, but not sure when I will get to it. Any help is welcome.

1reaction

ahayescommented, Feb 15, 2019

It is a shame this has been marked wontfix by a bot and left untouched. You can’t even use jitsi-meet without ssl enabled and an auto-renewing certbot seems pretty important for a turnkey solution like jitsi.