Renewal fails if the certificate is not in /etc/letsencrypt/live/$DOMAIN about certbot-zimbra

[maxxer]

That's the full output of the script? No messages before? It looks like it didn't run certbot, so it finds on disk an expired cert and fails verification.

There should be a renewal attempt

[syphernl]

I ran it with the -r flag, so it didn't renew the certificate since there already was a renewed certificate ready for install.

For some reason the symlinks of the live folder pointed towards /etc/letsencrypt/archive/zimbra.example.com-0001/ rather than /etc/letsencrypt/archive/zimbra.example.com/, so the symlink did contain an expired certificate.

[maxxer]

It happened to someone else too. Sometimes the $DOMAIN path is not the default one. I need to understand how to properly obtain it

[maxxer]

With certbot certificates -d $DOMAIN it's possible to obtain details about the cert, including file and key path. We should probably collect the path from here instead of using the hardcoded path

[jjakob]

Closing since the logic has changed in v0.7 and the issue isn't relevant any more.