Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: www.munerotto.it (wordpress) , nextmune.munerotto.it (nextcloud)
I ran this command: sudo certbot renew -v --dry-run
It produced this output:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/nextmune.munerotto.it.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Certificate is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer apache
Simulating renewal of an existing certificate for nextmune.munerotto.it and www.munerotto.it
Performing the following challenges:
http-01 challenge for nextmune.munerotto.it
http-01 challenge for www.munerotto.it
Waiting for verification...
Challenge failed for domain nextmune.munerotto.it
Challenge failed for domain www.munerotto.it
http-01 challenge for nextmune.munerotto.it
http-01 challenge for www.munerotto.it
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: nextmune.munerotto.it
Type: connection
Detail: 93.49.253.65: Fetching http://nextmune.munerotto.it/.well-known/acme-challenge/Ga8WnNd0WiHcID-0MiCF83VF-BUYE9ULygKdKwCIbqU: Timeout during connect (likely firewall problem)
Domain: www.munerotto.it
Type: connection
Detail: 93.49.253.65: Fetching http://www.munerotto.it/.well-known/acme-challenge/OBopCIVNBTIkfEQJTcC15RcsW5h8X5-SkgXozgd_DM0: Timeout during connect (likely firewall problem)
Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
Cleaning up challenges
Failed to renew certificate nextmune.munerotto.it with error: Some challenges have failed.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
All simulated renewals failed. The following certificates could not be renewed:
/etc/letsencrypt/live/nextmune.munerotto.it/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
My web server is (include version): apache 2.4
The operating system my web server runs on is (include version): Ubuntu 22.04
My hosting provider, if applicable, is: myself
I can login to a root shell on my machine (yes or no, or I don't know): YES
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): NO
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot) : certbot 2.6.0
=============================================
My sites-enabled in apache has two sites
www.munerotto.it.conf:
# Begin vhost record on the default HTTP port 80
<VirtualHost *:80>
# This is the name of the vhost.
ServerName www.munerotto.it
# These are alternative names for this same vhost.
# We put the other domains here. They will all go to the same place.
ServerAlias www.munerotto.it
# Directory where the website code lives.
DocumentRoot /var/www/html/www.munerotto.it
<Directory "/">
Options FollowSymLinks
AllowOverride All
</Directory>
# FM These lines are for the let's encrypt http verification process
AliasMatch /.well-known/acme-challenge/(.*)$ /var/www/html/.well-known/acme-challenge/$1
<directory /var/www/html/.well-known/acme-challenge>
AllowOverride None
Require all granted
</directory>
### LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
#Include conf-available/serve-cgi-bin.conf
# FM These lines force https
#RewriteEngine on
##RewriteCond %{SERVER_NAME} =www.munerotto.it
#RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>
and
nextmune.munerotto.it.conf
# Begin vhost record on the default HTTP port 80
<VirtualHost *:80>
# This is the name of the vhost.
ServerName nextmune.munerotto.it
# These are alternative names for this same vhost.
# We put the other domains here. They will all go to the same place.
ServerAlias nextmune.munerotto.it
# Directory where the website code lives.
DocumentRoot /var/www/html/nextmune.munerotto.it
<Directory "/">
Options FollowSymLinks
AllowOverride All
</Directory>
# FM These lines are for the let's encrypt http verification process
AliasMatch /.well-known/acme-challenge/(.*)$ /var/www/html/.well-known/acme-challenge/$1
<directory /var/www/html/.well-known/acme-challenge>
AllowOverride None
Require all granted
</directory>
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>
In the very beginning I had the NextCloud instance in a Raspberry at home and the www in a webhosting. Then I bought an used PC and I use it as server with both the hosts.
I renewed the certificates and everything was ok.
Two weeks ago I bought a Cudy: it's an appliance that if is connect via the WAN port act as router but if the connection would be missing it would connect vie LTE using cellular SIM: Cudy LT500 , connected as in this sketch
as my landline is buggy due to an old cable that the official owner (the former Italian telephone company) is not willing to change.
I created the path /var/www/html/.well-known/acme-challenge/
Then I shared that dir in both the apache's sites conf;
# FM These lines are for the let's encrypt http verification process
AliasMatch /.well-known/acme-challenge/(.*)$ /var/www/html/.well-known/acme-challenge/$1
<directory /var/www/html/.well-known/acme-challenge>
AllowOverride None
Require all granted
</directory>
but certbot is not working ;( and it complains that the http challenge is failing.
Do I need to work in the DNS, or there is a way to make the http verification working?
Thank in adance
PS I put the file hello.html which contains just the text "HELLO WORLD" in /var/www/html/.well-known/acme-challenge and wget http://nextmune.munerotto.it/.well-known/acme-challenge/hello.html works only if nextmune is set to 127.0.0.1 in /etc/hosts
PPS Forgot to say that /var/www/html/www.munerotto.it and /var/www/html/nextmune.munerotto.it are just two placeholders as I moved them away and their are just teo fresh foolders.
