UCS member server version 5.2-4 errata346; LE: 4.0.0-1
running in trouble during refreshing exisiting certificates:
Traceback (most recent call last):
File “/usr/share/univention-letsencrypt/acme_tiny.py”, line 196, in
…
Previously, I deleted some domain names from the variable “letsencrypt/domains” via the LE GUI.
The problem is located inside the script “/usr/share/univention-letsencrypt/acme_tiny.py”:
94 if subject_alt_names is not None:
95 for san in subject_alt_names.group(1).split(", “):
96 # following if-statement copies all domain names from the existing certificate without checking whether individual ones should be removed in the future (or already have been)
97 if san.startswith(“DNS:”):
98 domains.add(san[4:])
99 log.info(“Found domains: {0}”.format(”, ".join(domains)))
In this loop all alternate domain names of the existing certificate will added to (re)new domain name array which cause the above named error.
I only ran into this issue because the existing certificates had expired. Apparently, they are not being renewed automatically despite all descriptions stating otherwise, as there are no entries in the crontabs of the users “letsencrypt” or “root” (or is there any other time loop/control for that) ?