Failure to automatically renew

[davidjade]

I've used the service for a long time but now none of my certificates are renewing as scheduled. I see no failures in the logs that I can find. Today, I had 0 days left on my certificates (got notified by Let's Encrypt email that they were expiring).

So I went into the function app web page and manually selected the certificates to renew and then it worked. It's just the automatic renew that doesn't work.

Steps to reproduce the behavior:

1. Just set it up to run automatically

• App Service OS: Windows
• App Service Type: Code? I just deployed by following the instructions here
• Runtime Stack: .NET
• Certificate Type: main domain and sub domains

---

Well just to be clear. This certificate that failed to automatically renew had zero days left. It would have expired tomorrow if I had not manually renewed it. Seems like a bug.

[shibayan]

If there is no execution history for RenewCertificates_Timer, you need to restart it from Azure Portal. This is an issue with Azure Functions.

In all other cases, there should always be an execution log.

[davidjade]

There is an execution history. Looks like it ran 3 times in the last week (mon/wed/fri).

No errors so why did the certificates not renew?

[shibayan]

Information about the certificates to be automatically renewed will be output to the execution log of the RenewCertificates_Orchestrator function. Please check it.

If you have changed your ACME endpoint or have recently updated to Acmebot v3, you may not be eligible for automatic updates for safety reasons.

[davidjade]

RenewCertificates_Orchestrator shows no errors in the last 30 days. I am simple looking at the Invocations Traces list. Is there somewhere else I should look for more detail information?

When looking at this invocations, I seem to see two different results depending on which invocation I look at.

2021-09-22 00:00:03.591Executing 'RenewCertificates_Orchestrator' (Reason='(null)', Id=c5dd2db2-65e2-429d-90de-a5600bcafad1)
Information
2021-09-22 00:00:03.594 Executed 'RenewCertificates_Orchestrator' (Succeeded, Id=c5dd2db2-65e2-429d-90de-a5600bcafad1, Duration=2ms)
Information

But some of them show this instead.

2021-09-22 00:00:00.690 Executing 'RenewCertificates_Orchestrator' (Reason='(null)', Id=ce9baf6b-42c3-472d-aba0-64a3cf3b1bec)
Information
2021-09-22 00:00:00.704 55550eaaec8b4f03ac9498fb00b669e8: Function 'RenewCertificates_Orchestrator (Orchestrator)' started. IsReplay: False. Input: (null). State: Started. HubName: DurableFunctionsHub. AppName: acmebot-vvxd. SlotName: Production. ExtensionVersion: 2.5.1. SequenceNumber: 4. TaskEventId: -1
Information
2021-09-22 00:00:00.788 55550eaaec8b4f03ac9498fb00b669e8: Function 'GetExpiringCertificates (Activity)' scheduled. Reason: RenewCertificates_Orchestrator. IsReplay: False. State: Scheduled. HubName: DurableFunctionsHub. AppName: acmebot-vvxd. SlotName: Production. ExtensionVersion: 2.5.1. SequenceNumber: 5.
Information
2021-09-22 00:00:00.796 Executed 'RenewCertificates_Orchestrator' (Succeeded, Id=ce9baf6b-42c3-472d-aba0-64a3cf3b1bec, Duration=112ms)
Information
2021-09-22 00:00:03.593 Certificates are not found
Information
2021-09-22 00:00:03.593 55550eaaec8b4f03ac9498fb00b669e8: Function 'RenewCertificates_Orchestrator (Orchestrator)' completed. ContinuedAsNew: False. IsReplay: False. Output: (null). State: Completed. HubName: DurableFunctionsHub. AppName: acmebot-vvxd. SlotName: Production. ExtensionVersion: 2.5.1. SequenceNumber: 14. TaskEventId: -1
Information

I get these invocation daily but the results seems to ping-pong between these two log cases. Nothing looks like it is failing.

I haven't changed anything in Azure but I have restarted the acmebot function app when this all failed around Sept 6th. I'm not sure what you mean by changing the ACME endpoint but like I said, I have done nothing other than restart the function app right after this first happened. The only other thing I did was to manually cause the certificates to renew via the acmebot web UI.

How can I determine if I am not eligible for automatic updates? And if I am not, how to I re-enable that? I'm not sure what you mean by this.

[plettb]

I'm having a problem that is so similar I'm not sure it's the same. I know my certs are not renewing.

1. How did you "manually renew"? I have a day left on mine, and I'd like to try that. Alternatively, how can I re-run the renewal process? I don't know how to "re-invoke" a timer function.
2. Application Insights shows me the following exceptions:

• missing next nonce needed to sign request payload
• Orchestrator function 'IssueCertificate' failed: The activity function 'Http01Authorization' failed: "missing next nonce needed to sign request payload". See the function execution logs for additional details.
• Orchestrator function 'RenewCertificates_SubOrchestrator' failed: The orchestrator function 'IssueCertificate' failed: "The activity function 'Http01Authorization' failed: "missing next nonce needed to sign request payload". See the function execution logs for additional details.". See the function execution logs for additional details.

Thanks!