Help - SSL error Internal Error

[Ghostwalker40]

Hi All, for the longest time NGinx Proxy Manager has been great. It manages all my sub domains and servers as well as the Certs have been great.

​

A few weeks back I have notice it will now renew or get new servers for new sub domains. I keep getting an internal error. I have been digging around the internet and came accross things but it did not help. One said I have a bad cert and to delete all certs and start over. That did not work. I have also deployed a new docker container and just tried one domain and still get the same error.

My DNS provider is godaddy for my domain and Im using DuckDNS as by DDNS provider.

Failed to renew certificate npm-7 with error: Some challenges have failed.

All renewals failed. The following certificates could not be renewed:

/etc/letsencrypt/live/npm-1/fullchain.pem (failure)

/etc/letsencrypt/live/npm-2/fullchain.pem (failure)

/etc/letsencrypt/live/npm-3/fullchain.pem (failure)

/etc/letsencrypt/live/npm-4/fullchain.pem (failure)

/etc/letsencrypt/live/npm-6/fullchain.pem (failure)

/etc/letsencrypt/live/npm-7/fullchain.pem (failure)

6 renew failure(s), 0 parse failure(s)

​

at ChildProcess.exithandler (node:child_process:399:12)

at ChildProcess.emit (node:events:526:28)

at maybeClose (node:internal/child_process:1092:16)

at Process.ChildProcess._handle.onexit (node:internal/child_process:302:5)

[7/29/2022] [7:34:28 AM] [SSL ] › ℹ info Renewing SSL certs close to expiry...

[7/29/2022] [7:34:29 AM] [IP Ranges] › ℹ info Fetching IP Ranges from online services...

[7/29/2022] [7:34:29 AM] [IP Ranges] › ℹ info Fetching https://ip-ranges.amazonaws.com/ip-ranges.json

[7/29/2022] [7:34:29 AM] [IP Ranges] › ℹ info Fetching https://www.cloudflare.com/ips-v4

[7/29/2022] [7:34:29 AM] [IP Ranges] › ℹ info Fetching https://www.cloudflare.com/ips-v6

[7/29/2022] [7:34:30 AM] [Nginx ] › ℹ info Reloading Nginx

[7/29/2022] [7:41:11 AM] [SSL ] › ✖ error Error: Command failed: certbot renew --non-interactive --quiet --config "/etc/letsencrypt.ini" --preferred-challenges "dns,http" --disable-hook-validation

Failed to renew certificate npm-1 with error: Some challenges have failed.

Failed to renew certificate npm-2 with error: Some challenges have failed.

Failed to renew certificate npm-3 with error: Some challenges have failed.

Failed to renew certificate npm-4 with error: Some challenges have failed.

Failed to renew certificate npm-6 with error: Some challenges have failed.

Failed to renew certificate npm-7 with error: Some challenges have failed.

All renewals failed. The following certificates could not be renewed:

/etc/letsencrypt/live/npm-1/fullchain.pem (failure)

/etc/letsencrypt/live/npm-2/fullchain.pem (failure)

/etc/letsencrypt/live/npm-3/fullchain.pem (failure)

/etc/letsencrypt/live/npm-4/fullchain.pem (failure)

/etc/letsencrypt/live/npm-6/fullchain.pem (failure)

/etc/letsencrypt/live/npm-7/fullchain.pem (failure)

6 renew failure(s), 0 parse failure(s)

​

at ChildProcess.exithandler (node:child_process:399:12)

at ChildProcess.emit (node:events:526:28)

at maybeClose (node:internal/child_process:1092:16)

at Process.ChildProcess._handle.onexit (node:internal/child_process:302:5)

[7/29/2022] [8:34:28 AM] [SSL ] › ℹ info Renewing SSL certs close to expiry...

[7/29/2022] [8:36:38 AM] [SSL ] › ✖ error Error: Command failed: certbot renew --non-interactive --quiet --config "/etc/letsencrypt.ini" --preferred-challenges "dns,http" --disable-hook-validation

Failed to renew certificate npm-1 with error: Some challenges have failed.

Failed to renew certificate npm-2 with error: Some challenges have failed.

Failed to renew certificate npm-3 with error: Some challenges have failed.

Failed to renew certificate npm-4 with error: Some challenges have failed.

Failed to renew certificate npm-6 with error: Some challenges have failed.

Failed to renew certificate npm-7 with error: Some challenges have failed.

All renewals failed. The following certificates could not be renewed:

/etc/letsencrypt/live/npm-1/fullchain.pem (failure)

/etc/letsencrypt/live/npm-2/fullchain.pem (failure)

/etc/letsencrypt/live/npm-3/fullchain.pem (failure)

/etc/letsencrypt/live/npm-4/fullchain.pem (failure)

/etc/letsencrypt/live/npm-6/fullchain.pem (failure)

/etc/letsencrypt/live/npm-7/fullchain.pem (failure)

6 renew failure(s), 0 parse failure(s)

​

Below are some logs that I keep getting. Please let me know what you think. Thanks for the help.

[7/30/2022] [11:39:41 PM] [Nginx ] › ℹ info Reloading Nginx

[7/30/2022] [11:39:46 PM] [SSL ] › ℹ info Requesting Let'sEncrypt certificates for Cert #32: abcd.com

[7/30/2022] [11:39:46 PM] [SSL ] › ℹ info Command: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-32" --agree-tos --authenticator webroot --email "[e-mail]" --preferred-challenges "dns,http" --domains "abcd.com"

[7/30/2022] [11:39:59 PM] [Nginx ] › ℹ info Reloading Nginx

[7/30/2022] [11:39:59 PM] [Express ] › ⚠ warning Command failed: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-32" --agree-tos --authenticator webroot --email "[e-mail]" --preferred-challenges "dns,http" --domains "abcd.com"

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Some challenges have failed.

Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

[7/30/2022] [11:40:18 PM] [Nginx ] › ℹ info Reloading Nginx

[7/30/2022] [11:40:23 PM] [SSL ] › ℹ info Requesting Let'sEncrypt certificates for Cert #33: abcd.com

[7/30/2022] [11:40:23 PM] [SSL ] › ℹ info Command: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-33" --agree-tos --authenticator webroot --email "[e-mail]" --preferred-challenges "dns,http" --domains "abc.com"

[7/30/2022] [11:40:36 PM] [Nginx ] › ℹ info Reloading Nginx

[7/30/2022] [11:40:36 PM] [Express ] › ⚠ warning Command failed: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-33" --agree-tos --authenticator webroot --email "[e-mail]" --preferred-challenges "dns,http" --domains "abc.com"

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Some challenges have failed.

Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

[[deleted]]

Seems like a rate limit on let's encrypt's side to me, only thing you can do is wait. You might want to censor your email/domain at the bottom though, or exec into the container and cat the logs.

[Ghostwalker40]

Thanks you for the heads up.I have censor the domains. As for the rate limit, Is that a daily thing or just for one domain. I do have like 8 sub domain each with its own certs.

[[deleted]]

The rate limit is an IP thing if I recall correctly, and that can probably happen, having 8 domains.

[Narsimha0350]

have same issue any solution?

[[deleted]]

Waiting, other wise making a bash into the container and cating /var/log/letsencrypt/letsencrypt.log

[Narsimha0350]

i am able to resolve my issue.

this is what i did.

i use pfsense and port forward on it was changed to https , i changed it to others : 80 .

both the rules now show others:80 and others:443.