# Renewing Let's Encrypt Certification - Kibana

**URL:** <https://discuss.elastic.co/t/renewing-lets-encrypt-certification-kibana/304390>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [May 10, 2022, 7:25pm UTC](https://discuss.elastic.co/t/renewing-lets-encrypt-certification-kibana/304390 "2022-05-10T19:25:07Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hunter\_Goncalves](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hunter_goncalves/32/98372_2.png) [@Hunter\_Goncalves](https://discuss.elastic.co/u/Hunter_Goncalves)\
**Post date:** [May 10, 2022, 7:25pm UTC](https://discuss.elastic.co/t/renewing-lets-encrypt-certification-kibana/304390/1 "2022-05-10T19:25:07Z")

</div>

I'm stumped on renewing these lets encrypt certifications for kibana. There seems to be a permissions error but i'm not sure where. Screenshots show error message and permissions for lets encrypt files and kibana ssl symlinks. thanks!

Error code:

```auto
FATAL Error: EACCES: permission denied, open '/etc/kibana/ssl/<folder>/privkey1.pem'
[1]: kibana.service: Main process exited, code=exited, status=1/FAILURE

```

Permissions on pem files

```auto
total 172
-rw-r--r-- 1 kibana kibana 692 Feb 14 2021 README
lrwxrwxrwx 1 kibana kibana 58 May 6 18:33 chain1.pem -> /etc/letsencrypt/archive/<folder>/chain6.pem
lrwxrwxrwx 1 kibana kibana 62 May 6 18:33 fullchain1.pem -> /etc/letsencrypt/archive/<folder>/fullchain6.pem
lrwxrwxrwx 1 kibana kibana 57 May 6 18:47 cert1.pem -> /etc/letsencrypt/archive/<folder>/cert6.pem
lrwxrwxrwx 1 kibana kibana 60 May 10 11:27 privkey1.pem -> /etc/letsencrypt/archive/<folder>/privkey6.pem
-rw-r----- 1 root kibana 160167 May 10 11:30 ''$'\033'':q!'
root@<host>:/home/<name># ls -ltr /etc/letsencrypt/archive/<folder>/ | grep 6.pem
-rw-r----- 1 kibana kibana 1704 May 6 16:27 privkey6.pem
-rw-r----- 1 kibana kibana 5611 May 6 16:27 fullchain6.pem
-rw-r----- 1 kibana kibana 3749 May 6 16:27 chain6.pem
-rw-r----- 1 kibana kibana 1862 May 6 16:27 cert6.pem

```

---

<div class="post-metadata">

**Author:** ![Hunter\_Goncalves](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hunter_goncalves/32/98372_2.png) [@Hunter\_Goncalves](https://discuss.elastic.co/u/Hunter_Goncalves)\
**Post date:** [May 10, 2022, 7:33pm UTC](https://discuss.elastic.co/t/renewing-lets-encrypt-certification-kibana/304390/2 "2022-05-10T19:33:24Z")

</div>

update: I changed the permissions on privkey1.pem and STILL got 'permission denied':

```auto
-rwxrwxrwx 1 kibana kibana 1704 May 6 16:27 /etc/letsencrypt/archive/<folder>/privkey6.pem

```

```auto
: FATAL Error: EACCES: permission denied, open '/etc/kibana/ssl/<folder>/privkey1.pem'

```

---

<div class="post-metadata">

**Author:** ![Hunter\_Goncalves](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hunter_goncalves/32/98372_2.png) [@Hunter\_Goncalves](https://discuss.elastic.co/u/Hunter_Goncalves)\
**Post date:** [May 12, 2022, 1:57am UTC](https://discuss.elastic.co/t/renewing-lets-encrypt-certification-kibana/304390/3 "2022-05-12T01:57:56Z")

</div>

The solution was that the /etc/letsencrypt/archive directory was not readable.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 9, 2022, 1:58am UTC](https://discuss.elastic.co/t/renewing-lets-encrypt-certification-kibana/304390/4 "2022-06-09T01:58:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.