Vm: SSL: "It seems like no certs were generated"

[ncxpert]

Hello,

unlike in the past with the current community VM I have serious problems to finish SSL process.

There's always a error message "It seems like no certs were generated, we will do xx more tries" although there are messages indicating that certificate process itself was successfull:

---

Obtaining a new certificate
Performing the following challenges:
tls-sni-01 challenge for domainame.here
Waiting for verification...
Cleaning up challenges
Generating key (4096 bits): /etc/letsencrypt/keys/0000_key-certbot.pem
Creating CSR: /etc/letsencrypt/csr/0000_csr-certbot.pem

IMPORTANT NOTES:

• Congratulations! Your certificate and chain have been saved at
  /etc/letsencrypt/live/domainname.here/fullchain.pem. Your cert
  will expire on 2017-07-13. To obtain a new or tweaked version of
  this certificate in the future, simply run certbot again. To
  non-interactively renew all of your certificates, run "certbot
  renew"

[...]

Enabling site 000-default.
To activate the new configuration, you need to run:
service apache2 reload
It seems like no certs were generated, we will do 2 more tries.

---

Because of this issue startup script will not finish properly and / or will stop at the SSL-process.

Best regards,

Carlos

[enoch85]

@ncxpert OK, thanks for reporting. Does this happen all the time? Can you run the SSL script with debug mode activated and post the full output on https://hastebin.com/ and link it here? Thanks!

@morph027 We need to improve this even more.

[Ark74]

I tested 3 times. All of them get you there.

Here the output.
https://hastebin.com/ligoxacoru.diff

[enoch85]

@Ark74 What's the output of cat /tmp/le_test?

[enoch85]

Btw, please make sure you are running the latest version of the script: https://raw.githubusercontent.com/nextcloud/vm/master/lets-encrypt/activate-ssl.sh

[enoch85]

@Ark74 Found it, now it should work!

[Ark74]

Well, it was a clean installation, it should be the latest. I guess

[enoch85]

@Ark74 Please test again as soon as I merged this PR. Thanks!

[Ark74]

Yeah, i got it ready to test. :+1:

[enoch85]

@Ark74 Great, let me know the output. Thanks!

[Ark74]

It passes! :) Wow a 8192 bit key.
That's strong.

[enoch85]

@Ark74 Great, thanks for testing!