Cant renew my certificat

Help
1

occur error

Attempting to renew cert (DOMAIN NAME) from /etc/letsencrypt/renewal/DOMAIN.conf produced an unexpected error: Failed authorization procedure. DOMAIN (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching https://DOMAIN:80/.well-known/acme-challenge/KilbbK8DRShPMjdE2K5ZUtY1b1nUwV0c8vxmexwds_Q: Error getting validation data. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/DOMAIN/fullchain.pem (failure)

What i can do to repair it?

2

I'm moving this to the "Help" topic (instead of "Server"), where you would have been presented with the below form. Please go ahead and fill out this information, as we need to understand more in order to help you. That error means simply that, for some reason, the Let's Encrypt validation authority server was unable to connect to your server. The question of why is what's up in the air, and we would need some info to help you figure that out:

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

3

My domain is:(twistudio.ru)

I ran this command:certbot renew

It produced this output:Attempting to renew cert (DOMAIN NAME) from /etc/letsencrypt/renewal/DOMAIN.conf produced an unexpected error: Failed authorization procedure. DOMAIN (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching https://DOMAIN:80/.well-known/acme-challenge/KilbbK8DRShPMjdE2K5ZUtY1b1nUwV0c8vxmexwds_Q: Error getting validation data. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/DOMAIN/fullchain.pem (failure)

My web server is (include version):apache

The operating system my web server runs on is (include version):centos7

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):no

4

Is it possible that Boulder rejects URLs with ports, like http://example.com:80/?

5

idk certbot use https and i dont know why.And i cant find https://DOMAIN:80/.well-known/acme-challenge/KilbbK8DRShPMjdE2K5ZUtY1b1nUwV0c8vxmexwds_Q: in webserver directory only folder .well-known

6

Let’s Encrypt will follow redirects when validating the HTTP-01 challenge; is it possible you somehow had set up a redirect to https://domain:80 on your server? Although I don’t see a redirect now, maybe you removed it?

7

Wait a minute, it isn’t http://domain:80/, it’s https://domain:80/. That is not likely to work.

8

yea

i check nginx.conf and dont find redirect

9

That's normal. Certbot will delete the KilbbK8DRShPMjdE2K5ZUtY1b1nUwV0c8vxmexwds_Q file and acme-challenge directory when it exits.

10

Aha… the bare domain doesn’t redirect but the www subdomain does. Does that have a redirect configured?

1 Like
11

The redirect is coming from Apache.

1 Like
12

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.