Directadmin + LetsEncrypt AH01895: Unable to configure verify locations for client authentication

When directadmin fails to restart and you see this in your apache error_log

[Mon Feb 13 00:27:08.010103 2017] [ssl:emerg] [pid 23113:tid 139658483275584] AH02311: Fatal error initialising mod_ssl, exiting. See /var/log/apache2/xxxx/xxx.be.error.log for more information
AH00016: Configuration Failed

if you take a look in /var/log/apache2/xxxx/xxx.be.error.log and something like this appears

[Mon Feb 13 00:27:02.014701 2017] [ssl:emerg] [pid 22949:tid 140381588760384] AH01895: Unable to configure verify locations for client authentication

Take a look if the cacert file for that domain isn’t empty, my file looked like this:

-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----

If the file is empty, you’ll have to manually try to renew the domain until it works.

cd /usr/local/directadmin/scripts/
./letsencrypt renew xxxx.be 4096

First time i ran the command i saw this message:
Generating RSA private key, 4096 bit long modulus
....................................................++
.................................................................................................................................................................................................................................................................++
e is 65537 (0x10001)
Size of certificate response is smaller than 500 characters, it means something went wrong. Printing response...
"detail": "JWS has no anti-replay nonce"

third time i got a message the certificate has been created successfully.

Posted by Bram

Owner of x-plose. www.X-plose.be. Having fun with chef, icinga, networking