[Letsencrypt-devel] Bug#826840: certbot fails to renew certificate with "EntryPoint" error
Lnoferin con il nasone
lnoferin at cybervalley.org
Thu Jun 9 09:56:46 UTC 2016
Package: certbot
Version: 0.8.0-1
Severity: important
I have a certificate working made with previous letsencrypt for my apache web server.
Trying to renew this certificate with newly installed certbot gives me this error:
=============================================================================
root at nasone:~# certbot --dry-run renew
-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/bbs.cybervalley.org.conf
-------------------------------------------------------------------------------
2016-06-09 11:53:45,078:WARNING:certbot.renewal:Attempting to renew cert from /etc/letsencrypt/renewal/bbs.cybervalley.org.conf produced an unexpected error: 'EntryPoint' object has no attribute 'resolve'. Skipping.
** DRY RUN: simulating 'certbot renew' close to cert expiry
** (The test certificates below have not been saved.)
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/bbs.cybervalley.org/fullchain.pem (failure)
** DRY RUN: simulating 'certbot renew' close to cert expiry
** (The test certificates above have not been saved.)
1 renew failure(s), 0 parse failure(s)
==============================================================================
This is the complete log from /var/log/letsencrypt/letsencrypt.log
=============================================================================
2016-06-09 09:32:10,842:DEBUG:certbot.main:Root logging level set at 30
2016-06-09 09:32:10,843:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2016-06-09 09:32:10,843:DEBUG:certbot.main:certbot version: 0.8.0
2016-06-09 09:32:10,843:DEBUG:certbot.main:Arguments: ['--dry-run']
2016-06-09 09:32:10,844:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2016-06-09 09:32:10,857:DEBUG:certbot.plugins.selection:Requested authenticator <certbot.cli._Default object at 0x7f8a7d29e390> and installer <certbot.cli._Default object at 0x7f8a7d29e390>
2016-06-09 09:32:10,857:DEBUG:certbot.cli:Default Detector is Namespace(account=<certbot.cli._Default object at 0x7f8a7d26e710>, agree_dev_preview=None, allow_subset_of_names=<certbot.cli._Default object at 0x7f8a7d26e510>, apache=<certbot.cli._Default object at 0x7f8a7d29e490>, apache_challenge_location=<certbot.cli._Default object at 0x7f8a7d298c10>, apache_ctl=<certbot.cli._Default object at 0x7f8a7d298410>, apache_dismod=<certbot.cli._Default object at 0x7f8a7d29ead0>, apache_enmod=<certbot.cli._Default object at 0x7f8a7d29e9d0>, apache_handle_modules=<certbot.cli._Default object at 0x7f8a7d298910>, apache_handle_sites=<certbot.cli._Default object at 0x7f8a7d298610>, apache_init_script=<certbot.cli._Default object at 0x7f8a7d2980d0>, apache_le_vhost_ext=<certbot.cli._Default object at 0x7f8a7d29ec10>, apache_server_root=<certbot.cli._Default object at 0x7f8a7d29ed50>, apache_vhost_root=<certbot.cli._Default object at 0x7f8a7d298dd0>, authenticator=<certbot.cli._Default object at
0x7f8a7d29e390>, break_my_certs=<certbot.cli._Default object at 0x7f8a7d294050>, cert_path=<certbot.cli._Default object at 0x7f8a7d298850>, chain_path=<certbot.cli._Default object at 0x7f8a7d298b50>, checkpoints=<certbot.cli._Default object at 0x7f8a7d298350>, config_dir=<certbot.cli._Default object at 0x7f8a7d298c50>, config_file=None, configurator=<certbot.cli._Default object at 0x7f8a7d29e390>, csr=<certbot.cli._Default object at 0x7f8a7d298250>, debug=<certbot.cli._Default object at 0x7f8a7d26ec10>, dialog_mode=<certbot.cli._Default object at 0x7f8a7d267a50>, domains=<certbot.cli._Default object at 0x7f8a7d6d8510>, dry_run=True, duplicate=<certbot.cli._Default object at 0x7f8a7d26e810>, email=<certbot.cli._Default object at 0x7f8a7d6d8690>, expand=<certbot.cli._Default object at 0x7f8a7d26e250>, fullchain_path=<certbot.cli._Default object at 0x7f8a7d298a50>, func=<function renew at 0x7f8a7ebc92a8>, hsts=<certbot.cli._Default object at 0x7f8a7d294550>, http01_port=<certbot.cli._D
efault object at 0x7f8a7d26ef10>, ifaces=<certbot.cli._Default object at 0x7f8a7d298650>, init=<certbot.cli._Default object at 0x7f8a7d298450>, installer=<certbot.cli._Default object at 0x7f8a7d29e390>, key_path=<certbot.cli._Default object at 0x7f8a7d298950>, logs_dir=<certbot.cli._Default object at 0x7f8a7d298e50>, manual=<certbot.cli._Default object at 0x7f8a7d29e790>, manual_public_ip_logging_ok=<certbot.cli._Default object at 0x7f8a7d294910>, manual_test_mode=<certbot.cli._Default object at 0x7f8a7d294b10>, must_staple=<certbot.cli._Default object at 0x7f8a7d294250>, nginx=<certbot.cli._Default object at 0x7f8a7d29e590>, no_self_upgrade=<certbot.cli._Default object at 0x7f8a7d26ea10>, no_verify_ssl=<certbot.cli._Default object at 0x7f8a7d26ed10>, noninteractive_mode=<certbot.cli._Default object at 0x7f8a7d267710>, num=<certbot.cli._Default object at 0x7f8a7d298050>, os_packages_only=<certbot.cli._Default object at 0x7f8a7d26e910>, post_hook=<certbot.cli._Default object at 0x7f8
a7d294d50>, pre_hook=<certbot.cli._Default object at 0x7f8a7d294c50>, prepare=<certbot.cli._Default object at 0x7f8a7d298550>, quiet=<certbot.cli._Default object at 0x7f8a7d26eb10>, redirect=<certbot.cli._Default object at 0x7f8a7d294350>, register_unsafely_without_email=<certbot.cli._Default object at 0x7f8a7d267ed0>, reinstall=<certbot.cli._Default object at 0x7f8a7d26e150>, renew_by_default=<certbot.cli._Default object at 0x7f8a7d26e410>, renew_hook=<certbot.cli._Default object at 0x7f8a7d294e50>, rsa_key_size=<certbot.cli._Default object at 0x7f8a7d294150>, server=<certbot.cli._Default object at 0x7f8a7d298f50>, staging=<certbot.cli._Default object at 0x7f8a7d29e090>, standalone=<certbot.cli._Default object at 0x7f8a7d29e690>, standalone_supported_challenges=<certbot.cli._Default object at 0x7f8a7d294ed0>, staple=<certbot.cli._Default object at 0x7f8a7d294950>, strict_permissions=<certbot.cli._Default object at 0x7f8a7d294b50>, text_mode=<certbot.cli._Default object at 0x7f8a7d2
67510>, tls_sni_01_port=<certbot.cli._Default object at 0x7f8a7d26ee10>, tos=<certbot.cli._Default object at 0x7f8a7d26e610>, uir=<certbot.cli._Default object at 0x7f8a7d294750>, update_registration=<certbot.cli._Default object at 0x7f8a7d6d8810>, user_agent=<certbot.cli._Default object at 0x7f8a7d298150>, verb='renew', verbose_count=<certbot.cli._Default object at 0x7f8a7d2671d0>, webroot=<certbot.cli._Default object at 0x7f8a7d29e890>, webroot_map=<certbot.cli._Default object at 0x7f8a7d294d10>, webroot_path=<certbot.cli._Default object at 0x7f8a7d294f10>, work_dir=<certbot.cli._Default object at 0x7f8a7d298d50>)
2016-06-09 09:32:10,864:DEBUG:parsedatetime:parse (top of loop): [30 days][]
2016-06-09 09:32:10,876:DEBUG:parsedatetime:CRE_UNITS matched
2016-06-09 09:32:10,877:DEBUG:parsedatetime:parse (bottom) [][30 days][][]
2016-06-09 09:32:10,877:DEBUG:parsedatetime:weekday False, dateStd False, dateStr False, time False, timeStr False, meridian False
2016-06-09 09:32:10,877:DEBUG:parsedatetime:dayStr False, modifier False, modifier2 False, units True, qunits False
2016-06-09 09:32:10,877:DEBUG:parsedatetime:_evalString(30 days, time.struct_time(tm_year=2016, tm_mon=6, tm_mday=9, tm_hour=9, tm_min=32, tm_sec=10, tm_wday=3, tm_yday=161, tm_isdst=0))
2016-06-09 09:32:10,877:DEBUG:parsedatetime:_buildTime: [30 ][][days]
2016-06-09 09:32:10,877:DEBUG:parsedatetime:units days --> realunit days
2016-06-09 09:32:10,877:DEBUG:parsedatetime:return
2016-06-09 09:32:10,877:DEBUG:certbot.storage:Should renew, less than 30 days before certificate expiry 2016-06-30 05:59:00 UTC.
2016-06-09 09:32:10,878:INFO:certbot.renewal:Cert is due for renewal, auto-renewing...
2016-06-09 09:32:10,878:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2016-06-09 09:32:11,727:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.configurator:ApacheConfigurator
Initialized: <certbot_apache.configurator.ApacheConfigurator object at 0x7f8a7d298290>
Prep: True
2016-06-09 09:32:11,729:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.configurator:ApacheConfigurator
Initialized: <certbot_apache.configurator.ApacheConfigurator object at 0x7f8a7d298290>
Prep: True
2016-06-09 09:32:11,730:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.configurator.ApacheConfigurator object at 0x7f8a7d298290> and installer <certbot_apache.configurator.ApacheConfigurator object at 0x7f8a7d298290>
2016-06-09 09:32:11,731:WARNING:certbot.renewal:Attempting to renew cert from /etc/letsencrypt/renewal/bbs.cybervalley.org.conf produced an unexpected error: 'EntryPoint' object has no attribute 'resolve'. Skipping.
2016-06-09 09:32:11,732:DEBUG:certbot.renewal:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/certbot/renewal.py", line 345, in renew_all_lineages
main.obtain_cert(lineage_config, plugins, renewal_candidate)
File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 549, in obtain_cert
le_client = _init_le_client(config, auth, installer)
File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 359, in _init_le_client
acc, acme = _determine_account(config)
File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 323, in _determine_account
accounts = account_storage.find_all()
File "/usr/lib/python2.7/dist-packages/certbot/account.py", line 160, in find_all
accounts.append(self.load(account_id))
File "/usr/lib/python2.7/dist-packages/certbot/account.py", line 173, in load
regr = messages.RegistrationResource.json_loads(regr_file.read())
File "/usr/lib/python2.7/dist-packages/acme/jose/interfaces.py", line 180, in json_loads
return cls.from_json(loads)
File "/usr/lib/python2.7/dist-packages/acme/jose/json_util.py", line 297, in from_json
return cls(**cls.fields_from_json(jobj))
File "/usr/lib/python2.7/dist-packages/acme/jose/json_util.py", line 288, in fields_from_json
fields[slot] = field.decode(value)
File "/usr/lib/python2.7/dist-packages/acme/jose/json_util.py", line 92, in decode
return self.fdec(value)
File "/usr/lib/python2.7/dist-packages/acme/jose/json_util.py", line 297, in from_json
return cls(**cls.fields_from_json(jobj))
File "/usr/lib/python2.7/dist-packages/acme/jose/json_util.py", line 288, in fields_from_json
fields[slot] = field.decode(value)
File "/usr/lib/python2.7/dist-packages/acme/jose/json_util.py", line 92, in decode
return self.fdec(value)
File "/usr/lib/python2.7/dist-packages/acme/jose/json_util.py", line 489, in from_json
return type_cls(**type_cls.fields_from_json(jobj))
File "/usr/lib/python2.7/dist-packages/acme/jose/jwk.py", line 226, in fields_from_json
key = public_numbers.public_key(default_backend())
File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/__init__.py", line 35, in default_backend
_default_backend = MultiBackend(_available_backends())
File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/__init__.py", line 22, in _available_backends
"cryptography.backends"
AttributeError: 'EntryPoint' object has no attribute 'resolve'
=============================================================================
-- System Information:
Debian Release: 8.5
APT prefers stable
APT policy: (990, 'stable'), (500, 'stable-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages certbot depends on:
ii dialog 1.2-20140911-1
ii python-certbot 0.8.0-1
pn python:any <none>
certbot recommends no packages.
Versions of packages certbot suggests:
ii python-certbot-apache 0.8.0-1
ii python-certbot-doc 0.8.0-1
-- no debconf information
More information about the Letsencrypt-devel
mailing list