Failed to renew certificate

CiotBSD

Hi.
It seems I don't understand how to rewrite correctly certbot on my OpenBSD (7.7).

Today, I want to renew all certs, but it fails with this message Failed to renew certificate *** with error: urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Error finalizing order :: OCSP must-staple extension is no longer available: see https://letsencrypt.org/2024/12/05/ending-ocsp

I commented #must-staple = true, and even #staple-ocsp = true on /etc/letsencrypt/cli.ini; I've the same error.

what I didn't understand?

CiotBSD

OK, solution done!

must_staple wroted on files into /etc/letsencrypt/renewal/*.conf 😉
After commented, certbot no longer complains! 😃

Too, this need to comment all variables ssl_stapling* on the web server config.