stut.io

Certbot doesn't work anymore

How to fix an unexpected error while renewing an existing Let's Encrypt certificate for Nginx or Apache.

sudo certbot --nginx -d yourdomain.com
Renewing an existing certificate
An unexpected error occurred:
The client lacks sufficient authorization :: Error creating new authz :: Validations for new domains are disabled in the V1 API (https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430)
Please see the logfiles in /var/log/letsencrypt for more details.

Let’s Encrypt ACMEv1 protocol is no longer supported and you should upgrade to an ACMEv2.

It is not always possible to upgrade certbot, for example, if old Ubuntu versions like 14.04, 16.04 are used. It is good to update no-longer-supported OS, but it is also not always possible and not such a fast process.

There are still a solution to update SSL certificates using old OS and certbot, but API v2. The only thing to do is add the server parameter!

sudo certbot --nginx -d yourdomain.com --server https://acme-v02.api.letsencrypt.org/directory

Your existing certificate has been successfully renewed, and the new certificate
has been installed.

The new certificate covers the following domains: ...