The version in submodules/letsencrypt/drush/bin/dehydrated has become outdated... preventing new installations from getting past the initial LE account setup.

Workaround / Quick fix

drush @hm dl hosting_https-7.x-3.x-dev
drush @hm provision-verify
drush @server_master provision-verify

# Then verify your own site to renew it's SSL cert.
drush @yoursite provision-verify

Comments

helmo created an issue. See original summary.

  • helmo committed 34850bc on 7.x-3.x 
    Issue #3086056: Update bundled dehydrated to v0.6.5
helmo’s picture

helmo commented
Status: Active » Fixed

The error when your hit by this:

Please set LICENSE in config manually.

Now updated to v0.6.5

helmo’s picture

helmo commented
Issue summary: View changes
colan’s picture

colan
he/him
Primary language English
Location Toronto 🇨🇦
commented

Marked #3086323: Old version of dehydrated causes renewing certs to fail as a duplicate of this issue.

colan’s picture

colan
he/him
Primary language English
Location Toronto 🇨🇦
commented

With the workaround / quick fix, I ran into JWS has invalid anti-replay nonce:

Requesting challenge for example.com...	
ERROR: An error occurred while sending post-request to https://acme-v01.api.letsencrypt.org/acme/new-authz (Status 400)	
Details:	
{	
  "type": "urn:acme:error:badNonce",	
  "detail": "JWS has no anti-replay nonce",	
  "status": 400	
}	
Failed to generate Let's Encrypt certificates.

So I ran the full upgrade, and then everything worked.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.