Renew letsencrypt certificate for mailcow within docker

kezepema

The Letsencrypt certificate expired today for my mailserver.
The mailserver is Mailcow, runing inside a docker container.

I tried to run inside /opt/mailcow-dockerizedtheupdate.sh script. This script updates Mailcow as a whole, but not the certificates.
I also tried to execute docker exec -ti c6e3da88665e /bin/bash (Actually this is the acme-mailcow container) but was not able to install certbot.
After these steps I executed docker-compose down and subsequently docker-compose up -d

Which method should one use to update the Letsencrypt certificates?

MAGIC

The question is why it doesnt renew the certs?
Can you give us the logs from the acme container

kezepema

Thanks for your reaction! Sure I can give you the acme container logs. I have replaced parts of he ipv6 address and ip4 address for security reasons. I have replaced my maildomainname with example.com

[docker-compose logs –tail=200 -f acme-mailcow](https://)

cme-mailcow_1 | Sat Dec 18 21:34:35 CET 2021 - Waiting for Docker API…
acme-mailcow_1 | Sat Dec 18 21:34:35 CET 2021 - Docker API OK
acme-mailcow_1 | Sat Dec 18 21:34:35 CET 2021 - Waiting for Postfix…
acme-mailcow_1 | Sat Dec 18 21:34:35 CET 2021 - Postfix OK
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Waiting for Dovecot…
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Dovecot OK
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Waiting for database…
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Database OK
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Waiting for Nginx…
acme-mailcow_1 | Sat Dec 18 21:34:37 CET 2021 - Nginx OK
acme-mailcow_1 | Sat Dec 18 21:34:37 CET 2021 - Waiting for resolver…
acme-mailcow_1 | Sat Dec 18 21:34:37 CET 2021 - Resolver OK
acme-mailcow_1 | Sat Dec 18 21:34:37 CET 2021 - Waiting for domain table…
acme-mailcow_1 | OK
acme-mailcow_1 | Sat Dec 18 21:34:39 CET 2021 - Initializing, please wait…
acme-mailcow_1 | unable to load certificate
acme-mailcow_1 | 139944729881416:error:0909006C😛EM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
acme-mailcow_1 | unable to load certificate
acme-mailcow_1 | 139706598972232:error:0909006C😛EM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - Using existing domain rsa key /var/lib/acme/acme/key.pem
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - Using existing Lets Encrypt account key /var/lib/acme/acme/account.pem
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - Detecting IP addresses…
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - OK: 21.22.23.24, 2a01:db8:c010:a2eb::1
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - No A or AAAA record found for hostname autodiscover.bdpq.nl
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Found A record for autoconfig.example.com: example.com.example.com
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Cannot match your IP 21.22.23.24 against hostname autoconfig.example.com (DNS returned example.com.example.com.)
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Found AAAA record for mail.example.coml: 2a01:db8:c010:a2eb:: - skipping A record check
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Cannot match your IP 2a01:db8:c010:a2eb:0000:0000:0000:0001 against hostname mail.example.com (DNS returned 2a01:db8:c010:a2eb:0000:0000:0000:0000)
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Cannot validate any hostnames, skipping Let’s Encrypt for 1 hour.
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Use SKIP_LETS_ENCRYPT=y in mailcow.conf to skip it permanently.
acme-mailcow_1 | OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for Docker API…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Docker API OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for Postfix…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Postfix OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for Dovecot…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Dovecot OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for database…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Database OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for Nginx…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Nginx OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for resolver…
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Resolver OK
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Waiting for domain table…
acme-mailcow_1 | OK
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Initializing, please wait…
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Using existing domain rsa key /var/lib/acme/acme/key.pem
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Using existing Lets Encrypt account key /var/lib/acme/acme/account.pem
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Detecting IP addresses…
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - OK: 21.22.23.24, 2a01:db8:c010:a2eb::1
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - No A or AAAA record found for hostname autodiscover.example.com
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - Found A record for autoconfig.example.com: example.com.example.com
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - Cannot match your IP 21.22.23.24 against hostname autoconfig.example.com (DNS returned example.com.example.com.)
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - Found AAAA record for mail.example.com: 2a01:db8:c010:a2eb:: - skipping A record check
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - Cannot match your IP 2a01:db8:c010:a2eb:0000:0000:0000:0001 against hostname mail.bdpq.nl (DNS returned 2a01:db8:c010:a2eb:0000:0000:0000:0000)
acme-mailcow_1 | Sat Dec 18 23:35:06 CET 2021 - Cannot validate any hostnames, skipping Let’s Encrypt for 1 hour.
acme-mailcow_1 | Sat Dec 18 23:35:06 CET 2021 - Use SKIP_LETS_ENCRYPT=y in mailcow.conf to skip it permanently.
acme-mailcow_1 | OK

kezepema

[docker-compose logs –tail=200 -f acme-mailcow](https://)

cme-mailcow_1 | Sat Dec 18 21:34:35 CET 2021 - Waiting for Docker API…
acme-mailcow_1 | Sat Dec 18 21:34:35 CET 2021 - Docker API OK
acme-mailcow_1 | Sat Dec 18 21:34:35 CET 2021 - Waiting for Postfix…
acme-mailcow_1 | Sat Dec 18 21:34:35 CET 2021 - Postfix OK
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Waiting for Dovecot…
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Dovecot OK
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Waiting for database…
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Database OK
acme-mailcow_1 | Sat Dec 18 21:34:36 CET 2021 - Waiting for Nginx…
acme-mailcow_1 | Sat Dec 18 21:34:37 CET 2021 - Nginx OK
acme-mailcow_1 | Sat Dec 18 21:34:37 CET 2021 - Waiting for resolver…
acme-mailcow_1 | Sat Dec 18 21:34:37 CET 2021 - Resolver OK
acme-mailcow_1 | Sat Dec 18 21:34:37 CET 2021 - Waiting for domain table…
acme-mailcow_1 | OK
acme-mailcow_1 | Sat Dec 18 21:34:39 CET 2021 - Initializing, please wait…
acme-mailcow_1 | unable to load certificate
acme-mailcow_1 | 139944729881416:error:0909006C😛EM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
acme-mailcow_1 | unable to load certificate
acme-mailcow_1 | 139706598972232:error:0909006C😛EM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - Using existing domain rsa key /var/lib/acme/acme/key.pem
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - Using existing Lets Encrypt account key /var/lib/acme/acme/account.pem
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - Detecting IP addresses…
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - OK: 21.22.23.24, 2a01:db8:c010:a2eb::1
acme-mailcow_1 | Sat Dec 18 21:35:01 CET 2021 - No A or AAAA record found for hostname autodiscover.example.com
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Found A record for autoconfig.example.com: example.com.example.com
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Cannot match your IP 21.22.23.24 against hostname autoconfig.example.com (DNS returned example.com.example.com.)
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Found AAAA record for mail.example.coml: 2a01:db8:c010:a2eb:: - skipping A record check
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Cannot match your IP 2a01:db8:c010:a2eb:0000:0000:0000:0001 against hostname mail.example.com (DNS returned 2a01:db8:c010:a2eb:0000:0000:0000:0000)
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Cannot validate any hostnames, skipping Let’s Encrypt for 1 hour.
acme-mailcow_1 | Sat Dec 18 21:35:02 CET 2021 - Use SKIP_LETS_ENCRYPT=y in mailcow.conf to skip it permanently.
acme-mailcow_1 | OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for Docker API…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Docker API OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for Postfix…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Postfix OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for Dovecot…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Dovecot OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for database…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Database OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for Nginx…
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Nginx OK
acme-mailcow_1 | Sat Dec 18 22:35:02 CET 2021 - Waiting for resolver…
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Resolver OK
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Waiting for domain table…
acme-mailcow_1 | OK
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Initializing, please wait…
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Using existing domain rsa key /var/lib/acme/acme/key.pem
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Using existing Lets Encrypt account key /var/lib/acme/acme/account.pem
acme-mailcow_1 | Sat Dec 18 22:35:03 CET 2021 - Detecting IP addresses…
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - OK: 21.22.23.24, 2a01:db8:c010:a2eb::1
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - No A or AAAA record found for hostname autodiscover.example.com
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - Found A record for autoconfig.example.com: example.com.example.com
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - Cannot match your IP 21.22.23.24 against hostname autoconfig.example.com (DNS returned example.com.example.com.)
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - Found AAAA record for mail.example.com: 2a01:db8:c010:a2eb:: - skipping A record check
acme-mailcow_1 | Sat Dec 18 22:35:04 CET 2021 - Cannot match your IP 2a01:db8:c010:a2eb:0000:0000:0000:0001 against hostname mail.example.com (DNS returned 2a01:db8:c010:a2eb:0000:0000:0000:0000)
acme-mailcow_1 | Sat Dec 18 23:35:06 CET 2021 - Cannot validate any hostnames, skipping Let’s Encrypt for 1 hour.
acme-mailcow_1 | Sat Dec 18 23:35:06 CET 2021 - Use SKIP_LETS_ENCRYPT=y in mailcow.conf to skip it permanently.
acme-mailcow_1 | OK