{"action":"created","issue":{"url":"https://api.github.com/repos/certbot/certbot/issues/3281","repository_url":"https://api.github.com/repos/certbot/certbot","labels_url":"https://api.github.com/repos/certbot/certbot/issues/3281/labels{/name}","comments_url":"https://api.github.com/repos/certbot/certbot/issues/3281/comments","events_url":"https://api.github.com/repos/certbot/certbot/issues/3281/events","html_url":"https://github.com/certbot/certbot/issues/3281","id":165078004,"number":3281,"title":"Error while using certbot-auto renew --dry-run --apache when using two .conf files referring to the same cert","user":{"login":"MeerLin","id":14237330,"avatar_url":"https://avatars.githubusercontent.com/u/14237330?v=3","gravatar_id":"","url":"https://api.github.com/users/MeerLin","html_url":"https://github.com/MeerLin","followers_url":"https://api.github.com/users/MeerLin/followers","following_url":"https://api.github.com/users/MeerLin/following{/other_user}","gists_url":"https://api.github.com/users/MeerLin/gists{/gist_id}","starred_url":"https://api.github.com/users/MeerLin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MeerLin/subscriptions","organizations_url":"https://api.github.com/users/MeerLin/orgs","repos_url":"https://api.github.com/users/MeerLin/repos","events_url":"https://api.github.com/users/MeerLin/events{/privacy}","received_events_url":"https://api.github.com/users/MeerLin/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/certbot/certbot/labels/apache","name":"apache","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/certbot/certbot/milestones/8","html_url":"https://github.com/certbot/certbot/milestones/1.0.0","labels_url":"https://api.github.com/repos/certbot/certbot/milestones/8/labels","id":1353913,"number":8,"title":"1.0.0","description":"In theory, this milestone should be for things we consider necessary to consider the client solid and out of beta.  But it's become something of a holding place for many kinds of polishing tickets, and will probably need to be triaged further.","creator":{"login":"pde","id":479213,"avatar_url":"https://avatars.githubusercontent.com/u/479213?v=3","gravatar_id":"","url":"https://api.github.com/users/pde","html_url":"https://github.com/pde","followers_url":"https://api.github.com/users/pde/followers","following_url":"https://api.github.com/users/pde/following{/other_user}","gists_url":"https://api.github.com/users/pde/gists{/gist_id}","starred_url":"https://api.github.com/users/pde/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pde/subscriptions","organizations_url":"https://api.github.com/users/pde/orgs","repos_url":"https://api.github.com/users/pde/repos","events_url":"https://api.github.com/users/pde/events{/privacy}","received_events_url":"https://api.github.com/users/pde/received_events","type":"User","site_admin":false},"open_issues":143,"closed_issues":39,"state":"open","created_at":"2015-10-13T19:41:13Z","updated_at":"2016-08-13T01:15:07Z","due_on":"2016-09-15T07:00:00Z","closed_at":null},"comments":10,"created_at":"2016-07-12T13:18:16Z","updated_at":"2016-08-15T08:42:02Z","closed_at":null,"body":"As it seems, certbot-auto will detect a syntax error in the latter of the two config files even if the syntax is correct, proven by `apachectl configtest`.\r\n\r\nOutput:\r\n\r\n```\r\nroot@DOMAIN1:/root# certbot/certbot-auto renew --dry-run --apache\r\n\r\n-------------------------------------------------------------------------------\r\nProcessing /etc/letsencrypt/renewal/DOMAIN2.conf\r\n-------------------------------------------------------------------------------\r\n2016-07-12 14:46:23,074:WARNING:certbot.renewal:Attempting to renew cert from /etc/letsencrypt/renewal/DOMAIN2.conf produced an unexpected error: The apache plugin is not working; there may be problems with your existing configuration.\r\nThe error was: PluginError(('There has been an error in parsing the file (%s): %s', u'/etc/apache2/sites-enabled/webmail.DOMAIN2.conf', u'Syntax error'),). Skipping.\r\n\r\n-------------------------------------------------------------------------------\r\nProcessing /etc/letsencrypt/renewal/mail.DOMAIN1.conf\r\n-------------------------------------------------------------------------------\r\n2016-07-12 14:46:23,448:WARNING:certbot.renewal:Attempting to renew cert from /etc/letsencrypt/renewal/mail.DOMAIN1.conf produced an unexpected error: The apache plugin is not working; there may be problems with your existing configuration.\r\nThe error was: PluginError(('There has been an error in parsing the file (%s): %s', u'/etc/apache2/sites-enabled/webmail.DOMAIN2.conf', u'Syntax error'),). Skipping.\r\n\r\n-------------------------------------------------------------------------------\r\nProcessing /etc/letsencrypt/renewal/webmail.DOMAIN1.conf\r\n-------------------------------------------------------------------------------\r\n2016-07-12 14:46:23,918:WARNING:certbot.renewal:Attempting to renew cert from /etc/letsencrypt/renewal/webmail.DOMAIN1.conf produced an unexpected error: The apache plugin is not working; there may be problems with your existing configuration.\r\nThe error was: PluginError(('There has been an error in parsing the file (%s): %s', u'/etc/apache2/sites-enabled/webmail.DOMAIN2.conf', u'Syntax error'),). Skipping.\r\n\r\n-------------------------------------------------------------------------------\r\nProcessing /etc/letsencrypt/renewal/DOMAIN1.conf\r\n-------------------------------------------------------------------------------\r\n2016-07-12 14:46:24,315:WARNING:certbot.renewal:Attempting to renew cert from /etc/letsencrypt/renewal/DOMAIN1.conf produced an unexpected error: The apache plugin is not working; there may be problems with your existing configuration.\r\nThe error was: PluginError(('There has been an error in parsing the file (%s): %s', u'/etc/apache2/sites-enabled/webmail.DOMAIN2.conf', u'Syntax error'),). Skipping.\r\n\r\n-------------------------------------------------------------------------------\r\nProcessing /etc/letsencrypt/renewal/mail.DOMAIN2.conf\r\n-------------------------------------------------------------------------------\r\n2016-07-12 14:46:24,692:WARNING:certbot.renewal:Attempting to renew cert from /etc/letsencrypt/renewal/mail.DOMAIN2.conf produced an unexpected error: The apache plugin is not working; there may be problems with your existing configuration.\r\nThe error was: PluginError(('There has been an error in parsing the file (%s): %s', u'/etc/apache2/sites-enabled/webmail.DOMAIN2.conf', u'Syntax error'),). Skipping.\r\n** DRY RUN: simulating 'certbot renew' close to cert expiry\r\n**          (The test certificates below have not been saved.)\r\n\r\nAll renewal attempts failed. The following certs could not be renewed:\r\n  /etc/letsencrypt/live/DOMAIN2/fullchain.pem (failure)\r\n  /etc/letsencrypt/live/mail.DOMAIN1/fullchain.pem (failure)\r\n  /etc/letsencrypt/live/webmail.DOMAIN1/fullchain.pem (failure)\r\n  /etc/letsencrypt/live/DOMAIN1/fullchain.pem (failure)\r\n  /etc/letsencrypt/live/mail.DOMAIN2.de/fullchain.pem (failure)\r\n** DRY RUN: simulating 'certbot renew' close to cert expiry\r\n**          (The test certificates above have not been saved.)\r\n5 renew failure(s), 0 parse failure(s)\r\n```\r\n\r\nAs you can see, disregarding the mentioned config, it always fails on webmail.DOMAIN2.conf which uses the same cert as webmail.DOMAIN1.conf, because they are in the same chain, on the same machine and using the same webmail installation.\r\n\r\nIf necessary I can provide the full configuration files and (if required) without altering the domain names."},"comment":{"url":"https://api.github.com/repos/certbot/certbot/issues/comments/239754863","html_url":"https://github.com/certbot/certbot/issues/3281#issuecomment-239754863","issue_url":"https://api.github.com/repos/certbot/certbot/issues/3281","id":239754863,"user":{"login":"domcleal","id":482089,"avatar_url":"https://avatars.githubusercontent.com/u/482089?v=3","gravatar_id":"","url":"https://api.github.com/users/domcleal","html_url":"https://github.com/domcleal","followers_url":"https://api.github.com/users/domcleal/followers","following_url":"https://api.github.com/users/domcleal/following{/other_user}","gists_url":"https://api.github.com/users/domcleal/gists{/gist_id}","starred_url":"https://api.github.com/users/domcleal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/domcleal/subscriptions","organizations_url":"https://api.github.com/users/domcleal/orgs","repos_url":"https://api.github.com/users/domcleal/repos","events_url":"https://api.github.com/users/domcleal/events{/privacy}","received_events_url":"https://api.github.com/users/domcleal/received_events","type":"User","site_admin":false},"created_at":"2016-08-15T08:42:02Z","updated_at":"2016-08-15T08:42:02Z","body":"Perfect, I can reproduce the issue now. The problem comes from this line:\r\n\r\n    <ifmodule mod_rewrite.c=\"\">\r\n\r\nAugeas can't parse the `=\"\"`. I'm a little unsure if this is the correct Apache syntax, I suspect it should just be `<ifmodule mod_rewrite.c>` - though if Apache accepts it, Augeas should of course handle it, so I'll attempt to fix it. You should be able to get certbot working by removing the `=\"\"` from these lines.\r\n\r\n    <ifmodule mod_rewrite.c>"}}
{"actor":{"display_login":"domcleal"}}