You reported this:

When I run certbot from command line I am getting this error:

$ certbot
An unexpected error occurred:
KeyError: 'manual'
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/certbot-log-6yuviekg/log or re-run Certbot with -v for more details

Did you get this issue fixed?
If yes, then how?

Hi,

I can understand your concern, hence it needs further investigation to conclude anything. let's see.😊

Thanks for the replay. I'll be able to check later.

But do you think that it doesn't affect the correct renewal functioning that with input zmcontrol status it results 

certbot.timer Stopped

Thanks

Fabio

Hi,

Now it should work. Let us know how it goes.

root@mail ~ #
root@mail ~ # systemctl start carbonio-certbot.timer
root@mail ~ # systemctl enable carbonio-certbot.timer
root@mail ~ #
root@mail ~ #
root@mail ~ # systemctl status carbonio-certbot.timer
● carbonio-certbot.timer - Run Carbonio Certbot twice daily
Loaded: loaded (/lib/systemd/system/carbonio-certbot.timer; enabled; vendor preset: enabled)
Active: active (waiting) since Wed 2025-04-16 09:09:39 UTC; 3h 35min ago
Trigger: Thu 2025-04-17 09:49:10 UTC; 21h left
Triggers: ● carbonio-certbot.service

Apr 16 09:09:39 mail.liopardo.eu systemd: Started Run Carbonio Certbot twice daily.
root@mail ~ #
root@mail ~ #
root@mail ~ #
root@mail ~ # systemctl list-timers carbonio-certbot.timer
NEXT LEFT LAST PASSED UNIT ACTIVATES
Thu 2025-04-17 09:49:10 UTC 21h left Wed 2025-04-16 12:13:21 UTC 32min ago carbonio-certbot.timer carbonio-certbot.service

1 timers listed.
Pass --all to see loaded but inactive timers, too.
root@mail ~ #
root@mail ~ #
root@mail ~ #
root@mail ~ # journalctl -u carbonio-certbot.timer
Apr 16 09:04:45 mail.liopardo.eu systemd: carbonio-certbot.timer: Deactivated successfully.
Apr 16 09:04:45 mail.liopardo.eu systemd: Stopped Run Carbonio Certbot twice daily.
-- Boot b3cb5f938a8041a4b9c4611d8d61cbc9 --
Apr 16 09:09:39 mail.liopardo.eu systemd: Started Run Carbonio Certbot twice daily.
root@mail ~ #
root@mail ~ #
root@mail ~ # su zextras
To run a command as administrator (user "root"), use "sudo <command>".
See "man sudo_root" for details.

zextras@mail:/root$ zmcontrol status
Host mail.liopardo.eu
amavis Running
antispam Running
antivirus Running
cbpolicyd Running
certbot.timer Stopped
directory-server Running
mailbox Running
memcached Running
mta Running
opendkim Running
proxy Running
service webapp Running
service-discover Running
stats Running
config service Running

Hi,

Try this:

• Start the timer
• Enable it (if needed)
• See the status

For example:

root@mail:~# systemctl start carbonio-certbot.timer
root@mail:~# systemctl enable carbonio-certbot.timer

&

root@mail:~# systemctl status carbonio-certbot.timer
● carbonio-certbot.timer - Run Carbonio Certbot twice daily
     Loaded: loaded (/lib/systemd/system/carbonio-certbot.timer; enabled; vendor preset: enabled)
     Active: active (running) since Tue 2025-04-15 17:47:48 +06; 24h ago
    Trigger: n/a
   Triggers: ● carbonio-certbot.service

Apr 15 17:47:48 mail.demo-carbonioce.com systemd: Started Run Carbonio Certbot twice daily.
root@mail:~#
root@mail:~#
root@mail:~#
root@mail:~# systemctl list-timers carbonio-certbot.timer
NEXT                        LEFT    LAST                        PASSED  UNIT                   ACTIVATES
Thu 2025-04-17 02:53:23 +06 8h left Wed 2025-04-16 18:20:03 +06 28s ago carbonio-certbot.timer carbonio-certbot.service

1 timers listed.
Pass --all to see loaded but inactive timers, too.
root@mail:~#
root@mail:~#
root@mail:~#
root@mail:~# journalctl -u carbonio-certbot.timer
Apr 11 21:58:33 mail.demo-carbonioce.com systemd: Started Run Carbonio Certbot twice daily.
Apr 15 17:43:09 mail.demo-carbonioce.com systemd: carbonio-certbot.timer: Deactivated successfully.
Apr 15 17:43:09 mail.demo-carbonioce.com systemd: Stopped Run Carbonio Certbot twice daily.
-- Boot b6fe48d3b61a4cba9e8beef3fabb8249 --
Apr 15 17:47:48 mail.demo-carbonioce.com systemd: Started Run Carbonio Certbot twice daily.
root@mail:~#

Hi and thank you for your great Job

Certbot.timer each time postponed the renewal by a few hours without ever doing it

So I succesfully forced certs renew very close to expire.

After reboot certs are renewed and if I input zmcontrol status i obtain   certbot.timer Stopped

and if I input  systemctl status carbonio-certbot.service I get:

○ carbonio-certbot.service - Renew certificates acquired via Carbonio Certbot
Loaded: loaded (/lib/systemd/system/carbonio-certbot.service; static)
Active: inactive (dead)
TriggeredBy: ● carbonio-certbot.timer
Docs: https://eff-certbot.readthedocs.io/en/stable/

Whats wrong?

Thanks

Fabio

It is very nice, not a simgle response to my problem .... and now I can't access the admin web service ...

WIll try to find by myself ...

The only solution I find was to create a new file "nginx.conf.web.https.template" in the directoey "/opt/zextras/conf/nginx/templates_custom" copy of the same file in "/opt/zextras/conf/nginx/templates".

I modify the lines (23/24) :

ssl_certificate ${ssl.crt};
ssl_certificate_key ${ssl.key};

to :

ssl_certificate /opt/zextras/conf/nginx.crt;
ssl_certificate_key /opt/zextras/conf/nginx.key;

Restarting the proxy : "zmproxyctl restart" and ... the web app is OK, from PC as from the Iphone application.

I hope this will help somebody.

I think that it is a small bug (?).

Regards

JP P

The certificate verification is OK :

/opt/zextras/libexec/zmcheckexpiredcerts -days 30 -verbose -mailto jpp@jpp.fr
ldap: notAfter=Sep 8 13:23:43 2024 GMT '/opt/zextras/conf/slapd.crt' expires outside of 30 days (OK)
mailboxd: notAfter=Sep 8 13:23:43 2024 GMT '/opt/zextras/mailboxd/etc/mailboxd.pem' expires outside of 30 days (OK)
mta: notAfter=Sep 8 13:23:43 2024 GMT '/opt/zextras/conf/smtpd.crt' expires outside of 30 days (OK)
proxy: notAfter=Sep 8 13:23:43 2024 GMT '/opt/zextras/conf/nginx.crt' expires outside of 30 days (OK)

But when I try to connect to the web service I get always :

This server could not prove that it is mail.jppozzi.dyndns.org; its security certificate expired 13 days ago. 

The file "/opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.crt and the key" are always ending on 16/06/2024 and renewed every day at 00:00 and that file is used in all nginx config files :

./includes/nginx.conf.mail.imaps: server_name mail.jppozzi.dyndns.org;
./includes/nginx.conf.mail.imaps: ssl_certificate /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.crt;
./includes/nginx.conf.mail.imaps: ssl_certificate_key /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.key;
./includes/nginx.conf.mail.imap: server_name mail.jppozzi.dyndns.org;
./includes/nginx.conf.mail.imap: ssl_certificate /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.crt;
./includes/nginx.conf.mail.imap: ssl_certificate_key /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.key;
./includes/nginx.conf.mail.pop3: server_name mail.jppozzi.dyndns.org;
./includes/nginx.conf.mail.pop3: ssl_certificate /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.crt;
./includes/nginx.conf.mail.pop3: ssl_certificate_key /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.key;
./includes/nginx.conf.web.admin: server_name mail.jppozzi.dyndns.org;
./includes/nginx.conf.web.admin: ssl_certificate /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.crt;
./includes/nginx.conf.web.admin: ssl_certificate_key /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.key;
./includes/nginx.conf.mail.pop3s: server_name mail.jppozzi.dyndns.org;
./includes/nginx.conf.mail.pop3s: ssl_certificate /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.crt;
./includes/nginx.conf.mail.pop3s: ssl_certificate_key /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.key;
./includes/nginx.conf.map.crt:mail.jppozzi.dyndns.org /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.crt;
./includes/nginx.conf.web.https: server_name mail.jppozzi.dyndns.org;
./includes/nginx.conf.web.https: ssl_certificate /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.crt;
./includes/nginx.conf.web.https: ssl_certificate_key /opt/zextras/conf/domaincerts/mail.jppozzi.dyndns.org.key;

From what files are that files copied ?

Regards

JP P