Certbot not working

Help
1

Please fill out the fields below so we can help you better.

My domain is:elenadumitrache.ro

I ran this command:certboot --apache

It produced this output: ConnectionError: (‘Connection aborted.’, BadStatusLine("’’",))

My operating system is (include version): debian 8.7

My web server is (include version): apache 2.4

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

Here is the log file:

2017-02-17 14:19:24,369:DEBUG:certbot.main:Root logging level set at 20
2017-02-17 14:19:24,372:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2017-02-17 14:19:24,392:DEBUG:certbot.main:certbot version: 0.9.3
2017-02-17 14:19:24,393:DEBUG:certbot.main:Arguments: [’–apache’]
2017-02-17 14:19:24,395:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2017-02-17 14:19:24,407:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
2017-02-17 14:19:25,810:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
Description: Apache Web Server plugin - Beta
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = certbot_apache.configurator:ApacheConfigurator
Initialized: <certbot_apache.configurator.ApacheConfigurator object at 0xb46117cc>
Prep: True
2017-02-17 14:19:25,815:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.configurator.ApacheConfigurator object at 0xb46117cc> and installer <certbot_apache.configurator.ApacheConfigurator object at 0xb46117cc>
2017-02-17 14:19:44,989:DEBUG:certbot.main:Picked account: <Account(bdf1f27f0c5260adcf0553678e143056)>
2017-02-17 14:19:44,995:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
2017-02-17 14:19:45,002:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2017-02-17 14:19:45,381:DEBUG:requests.packages.urllib3.connectionpool:“GET /directory HTTP/1.1” 200 352
2017-02-17 14:19:45,384:DEBUG:root:Received <Response [200]>. Headers: {‘Content-Length’: ‘352’, ‘Expires’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘Boulder-Request-Id’: ‘lDGLFKKHusjRc9Fm0mHn5bmhCz5MtSCCB3pSwEMiGWE’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘LBJ8T91hij5h1uZDPJrY67YUmSx8v9al55ipXWr7lv8’}. Content: '{\n “key-change”: “https://acme-v01.api.letsencrypt.org/acme/key-change”,\n “new-authz”: “https://acme-v01.api.letsencrypt.org/acme/new-authz”,\n “new-cert”: “https://acme-v01.api.letsencrypt.org/acme/new-cert”,\n “new-reg”: “https://acme-v01.api.letsencrypt.org/acme/new-reg”,\n “revoke-cert”: “https://acme-v01.api.letsencrypt.org/acme/revoke-cert”\n}'
2017-02-17 14:19:45,385:DEBUG:acme.client:Received response <Response [200]> (headers: {‘Content-Length’: ‘352’, ‘Expires’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘Boulder-Request-Id’: ‘lDGLFKKHusjRc9Fm0mHn5bmhCz5MtSCCB3pSwEMiGWE’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘LBJ8T91hij5h1uZDPJrY67YUmSx8v9al55ipXWr7lv8’}): '{\n “key-change”: “https://acme-v01.api.letsencrypt.org/acme/key-change”,\n “new-authz”: “https://acme-v01.api.letsencrypt.org/acme/new-authz”,\n “new-cert”: “https://acme-v01.api.letsencrypt.org/acme/new-cert”,\n “new-reg”: “https://acme-v01.api.letsencrypt.org/acme/new-reg”,\n “revoke-cert”: “https://acme-v01.api.letsencrypt.org/acme/revoke-cert”\n}'
2017-02-17 14:19:45,387:INFO:certbot.main:Obtaining a new certificate
2017-02-17 14:19:45,407:DEBUG:root:Requesting fresh nonce
2017-02-17 14:19:45,407:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {}
2017-02-17 14:19:45,627:DEBUG:requests.packages.urllib3.connectionpool:“HEAD /acme/new-authz HTTP/1.1” 405 0
2017-02-17 14:19:45,629:DEBUG:root:Received <Response [405]>. Headers: {‘Content-Length’: ‘91’, ‘Pragma’: ‘no-cache’, ‘Boulder-Request-Id’: ‘VKWxEsBtYBnMBsHtT1dfuTZIUhWxjw8ii58mHUTbV-k’, ‘Expires’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Allow’: ‘POST’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘Content-Type’: ‘application/problem+json’, ‘Replay-Nonce’: ‘CsEM4rr6rVuSmXVqscn-Rq8WYE_Z8BlIscZXHtvRT3s’}. Content: ''
2017-02-17 14:19:45,630:DEBUG:acme.client:Storing nonce: '\n\xc1\x0c\xe2\xba\xfa\xad[\x92\x99uj\xb1\xc9\xfeF\xaf\x16`O\xd9\xf0\x19H\xb1\xc6W\x1e\xdb\xd1O{'
2017-02-17 14:19:45,633:DEBUG:acme.jose.json_util:Omitted empty fields: status=None, challenges=None, expires=None, combinations=None
2017-02-17 14:19:45,634:DEBUG:acme.client:Serialized JSON: {“identifier”: {“type”: “dns”, “value”: “www.elenadumitrache.ro”}, “resource”: “new-authz”}
2017-02-17 14:19:45,638:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), x5u=None, x5tS256=None, x5t=None, cty=None, alg=None, jwk=None, kid=None, typ=None, jku=None
2017-02-17 14:19:45,666:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), x5u=None, x5tS256=None, x5t=None, cty=None, nonce=None, kid=None, typ=None, jku=None
2017-02-17 14:19:45,668:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “tQUPeZYNk9vJxIHHWRYwNicfq8Mx17mFo0-2vTcpehC_DrU8fLXv-yHSWQv8vQsTRBTX-xRNxJXNASwF7aJHb7GCjmlCCzXNoFC_FmHSmBlKWyAcJr2zth2F3cSNZR4IIjQdDQfY4WFn5pThKDMaC8_A9orGNv0QszsnTZW6bcdjLFvVY-oDZxBPf74B2VYPJxUBvzFH8hE0mQX4kse90XMFsmG0Xq_7d2T-I8sqs4M-im0aEIGXCyTgmy8JFpelm09OoJMq93wcf-xyhzINhqQscNp8VMtCX_fPgMggLMOl-QNmf06D46NBSiyv2MW5gyQWcudlM7ZCG3Fs6mop1Q”}}, “protected”: “eyJub25jZSI6ICJDc0VNNHJyNnJWdVNtWFZxc2NuLVJxOFdZRV9aOEJsSXNjWlhIdHZSVDNzIn0”, “payload”: “eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJ3d3cuZWxlbmFkdW1pdHJhY2hlLnJvIn0sICJyZXNvdXJjZSI6ICJuZXctYXV0aHoifQ”, “signature”: “dRtwWgpZfJfLQTjv26djil9dkNGXwy8P0GToWlzBuxIiBDFKviw8egJvo_w4LuRnKyBZ6uTHwuA78MBWS9FFczBTqw-BiwfnOpo570fKptpm8AyG3FPXZH2aYH9Vh9JAmtF65gLx0LjG9UJ8aOpiXheZSkkPkZPubrwYTsmCuYjYwGqplFm6e68hQ_uT6CpBgtYIXXroGJZyz6VMxcMGz_MSy6ZLXscGh6QwdYX9_D0_zvyHonnMJrNgEJDjsclCsH5xiDM6xJbpfkDXwMJDX7C-Pvd-m9fvzYEf6GZcaa4FgbUtXVK3yp2a-4o8TQsQh6Ajwstp9sootbs_GLIwPQ”}’}
2017-02-17 14:19:45,937:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/new-authz HTTP/1.1” 201 1353
2017-02-17 14:19:45,940:DEBUG:root:Received <Response [201]>. Headers: {‘Content-Length’: ‘1353’, ‘Expires’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘Boulder-Request-Id’: ‘YMveKkiRN_dbPDkMz11CWEj4fdc51APfIjFnk0LaETk’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E’, ‘Pragma’: ‘no-cache’, ‘Boulder-Requester’: ‘9590962’, ‘Date’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘QRt7boKkHFvesBGlfHQ97o8H9qOQa96_6P5jeq0gJ8I’}. Content: '{\n “identifier”: {\n “type”: “dns”,\n “value”: “www.elenadumitrache.ro”\n },\n “status”: “valid”,\n “expires”: “2017-04-18T14:08:33Z”,\n “challenges”: [\n {\n “type”: “http-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050246”,\n “token”: “4KGwVrmG5TOpqIRdIOBq3CU_hZ8bIVcQOUiesAL4gvw”\n },\n {\n “type”: “tls-sni-01”,\n “status”: “valid”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247”,\n “token”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE”,\n “keyAuthorization”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE.PKzrRiH2W1ihW8xs9EdmwXjSPcGZ3a1gS26bjYOlAa4”,\n “validationRecord”: [\n {\n “hostname”: “www.elenadumitrache.ro”,\n “port”: “443”,\n “addressesResolved”: [\n “79.118.79.30”\n ],\n “addressUsed”: “79.118.79.30”\n }\n ]\n },\n {\n “type”: “dns-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050248”,\n “token”: “iO2SlPF-Y257Egh-Hp3yMaA7ZEEXzLq69jYRIVthQXQ”\n }\n ],\n “combinations”: [\n [\n 1\n ],\n [\n 2\n ],\n [\n 0\n ]\n ]\n}'
2017-02-17 14:19:45,941:DEBUG:acme.client:Storing nonce: "A\x1b{n\x82\xa4\x1c[\xde\xb0\x11\xa5|t=\xee\x8f\x07\xf6\xa3\x90k\xde\xbf\xe8\xfecz\xad '\xc2"
2017-02-17 14:19:45,941:DEBUG:acme.client:Received response <Response [201]> (headers: {‘Content-Length’: ‘1353’, ‘Expires’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘Boulder-Request-Id’: ‘YMveKkiRN_dbPDkMz11CWEj4fdc51APfIjFnk0LaETk’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E’, ‘Pragma’: ‘no-cache’, ‘Boulder-Requester’: ‘9590962’, ‘Date’: ‘Fri, 17 Feb 2017 14:19:30 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘QRt7boKkHFvesBGlfHQ97o8H9qOQa96_6P5jeq0gJ8I’}): '{\n “identifier”: {\n “type”: “dns”,\n “value”: “www.elenadumitrache.ro”\n },\n “status”: “valid”,\n “expires”: “2017-04-18T14:08:33Z”,\n “challenges”: [\n {\n “type”: “http-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050246”,\n “token”: “4KGwVrmG5TOpqIRdIOBq3CU_hZ8bIVcQOUiesAL4gvw”\n },\n {\n “type”: “tls-sni-01”,\n “status”: “valid”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247”,\n “token”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE”,\n “keyAuthorization”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE.PKzrRiH2W1ihW8xs9EdmwXjSPcGZ3a1gS26bjYOlAa4”,\n “validationRecord”: [\n {\n “hostname”: “www.elenadumitrache.ro”,\n “port”: “443”,\n “addressesResolved”: [\n “79.118.79.30”\n ],\n “addressUsed”: “79.118.79.30”\n }\n ]\n },\n {\n “type”: “dns-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050248”,\n “token”: “iO2SlPF-Y257Egh-Hp3yMaA7ZEEXzLq69jYRIVthQXQ”\n }\n ],\n “combinations”: [\n [\n 1\n ],\n [\n 2\n ],\n [\n 0\n ]\n ]\n}'
2017-02-17 14:19:45,944:INFO:certbot.auth_handler:Performing the following challenges:
2017-02-17 14:19:45,964:INFO:certbot.auth_handler:tls-sni-01 challenge for www.elenadumitrache.ro
2017-02-17 14:19:49,738:DEBUG:certbot_apache.tls_sni_01:Adding Include /etc/apache2/le_tls_sni_01_cert_challenge.conf to /files/etc/apache2/apache2.conf
2017-02-17 14:19:49,744:DEBUG:certbot_apache.tls_sni_01:writing a config file with text:

<VirtualHost *:443>
ServerName a98a17a168afdbaa062b51e722f9926a.cd993c445d3523a45f739caafbd110a5.acme.invalid
UseCanonicalName on
SSLStrictSNIVHostCheck on

LimitRequestBody 1048576

Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /var/lib/letsencrypt/-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE.crt
SSLCertificateKeyFile /var/lib/letsencrypt/-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE.pem

DocumentRoot /var/lib/letsencrypt/tls_sni_01_page/

2017-02-17 14:19:49,830:DEBUG:certbot.reverter:Creating backup of /etc/apache2/apache2.conf
2017-02-17 14:19:53,223:INFO:certbot.auth_handler:Waiting for verification…
2017-02-17 14:19:53,244:DEBUG:acme.client:Serialized JSON: {“keyAuthorization”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE.PKzrRiH2W1ihW8xs9EdmwXjSPcGZ3a1gS26bjYOlAa4”, “type”: “tls-sni-01”, “resource”: “challenge”}
2017-02-17 14:19:53,249:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), x5u=None, x5tS256=None, x5t=None, cty=None, alg=None, jwk=None, kid=None, typ=None, jku=None
2017-02-17 14:19:53,276:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), x5u=None, x5tS256=None, x5t=None, cty=None, nonce=None, kid=None, typ=None, jku=None
2017-02-17 14:19:53,278:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247. args: (), kwargs: {‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “tQUPeZYNk9vJxIHHWRYwNicfq8Mx17mFo0-2vTcpehC_DrU8fLXv-yHSWQv8vQsTRBTX-xRNxJXNASwF7aJHb7GCjmlCCzXNoFC_FmHSmBlKWyAcJr2zth2F3cSNZR4IIjQdDQfY4WFn5pThKDMaC8_A9orGNv0QszsnTZW6bcdjLFvVY-oDZxBPf74B2VYPJxUBvzFH8hE0mQX4kse90XMFsmG0Xq_7d2T-I8sqs4M-im0aEIGXCyTgmy8JFpelm09OoJMq93wcf-xyhzINhqQscNp8VMtCX_fPgMggLMOl-QNmf06D46NBSiyv2MW5gyQWcudlM7ZCG3Fs6mop1Q”}}, “protected”: “eyJub25jZSI6ICJRUnQ3Ym9La0hGdmVzQkdsZkhROTdvOEg5cU9RYTk2XzZQNWplcTBnSjhJIn0”, “payload”: “eyJrZXlBdXRob3JpemF0aW9uIjogIi00elgwRkl3TGl0SW9GN2dVV3Q5Y2tHY2MwTHFwdnhOWVctM2pYZTV0ckUuUEt6clJpSDJXMWloVzh4czlFZG13WGpTUGNHWjNhMWdTMjZiallPbEFhNCIsICJ0eXBlIjogInRscy1zbmktMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0”, “signature”: “Xu9beG3uHYxqhk1hzDC3-hExbnNeZBOECBO2pToAdyUh3-0k-UZu2VEzrXqEn3nmGRCtxXQ8PrR8OB7u3eXsy-4y2PoUk4CoCqZfxsai0XFy8ckflORyAl-K5UtMbVhduPNYbqeZgfMDkKv-UTipcA7ns_kSgjfkIpSxQ5WkmM-F7DPNIuDejHNzqz7HQMd6O5eT6F7Axm68w6odg1ICDCKEfHB4l51WAWvG99M-eePMImDFq_G7gX6P_l1ktXKgZDEpxds6lwsb0Q5lkV3VlUqIKzdABkuu-E5SaxujBrSJHX_JHMq7oLBu28mIqin8iEDANHs80TcpwytAE927uA”}’}
2017-02-17 14:19:53,522:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247 HTTP/1.1” 202 539
2017-02-17 14:19:53,524:DEBUG:root:Received <Response [202]>. Headers: {‘Content-Length’: ‘539’, ‘Boulder-Request-Id’: ‘07PXR9ZHO0t3tBAF192pndf7VL4v3vCzDD-4X4WunX0’, ‘Expires’: ‘Fri, 17 Feb 2017 14:19:38 GMT’, ‘Server’: ‘nginx’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E;rel=“up”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247’, ‘Pragma’: ‘no-cache’, ‘Boulder-Requester’: ‘9590962’, ‘Date’: ‘Fri, 17 Feb 2017 14:19:38 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘rtlAykoWSrVdhaueBPno2t2AnnEri1JlZD9iCoYcBeA’}. Content: '{\n “type”: “tls-sni-01”,\n “status”: “valid”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247”,\n “token”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE”,\n “keyAuthorization”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE.PKzrRiH2W1ihW8xs9EdmwXjSPcGZ3a1gS26bjYOlAa4”,\n “validationRecord”: [\n {\n “hostname”: “www.elenadumitrache.ro”,\n “port”: “443”,\n “addressesResolved”: [\n “79.118.79.30”\n ],\n “addressUsed”: “79.118.79.30”\n }\n ]\n}'
2017-02-17 14:19:53,525:DEBUG:acme.client:Storing nonce: '\xae\xd9@\xcaJ\x16J\xb5]\x85\xab\x9e\x04\xf9\xe8\xda\xdd\x80\x9eq+\x8bRed?b\n\x86\x1c\x05\xe0’
2017-02-17 14:19:53,525:DEBUG:acme.client:Received response <Response [202]> (headers: {‘Content-Length’: ‘539’, ‘Boulder-Request-Id’: ‘07PXR9ZHO0t3tBAF192pndf7VL4v3vCzDD-4X4WunX0’, ‘Expires’: ‘Fri, 17 Feb 2017 14:19:38 GMT’, ‘Server’: ‘nginx’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E;rel=“up”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247’, ‘Pragma’: ‘no-cache’, ‘Boulder-Requester’: ‘9590962’, ‘Date’: ‘Fri, 17 Feb 2017 14:19:38 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘rtlAykoWSrVdhaueBPno2t2AnnEri1JlZD9iCoYcBeA’}): '{\n “type”: “tls-sni-01”,\n “status”: “valid”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247”,\n “token”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE”,\n “keyAuthorization”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE.PKzrRiH2W1ihW8xs9EdmwXjSPcGZ3a1gS26bjYOlAa4”,\n “validationRecord”: [\n {\n “hostname”: “www.elenadumitrache.ro”,\n “port”: “443”,\n “addressesResolved”: [\n “79.118.79.30”\n ],\n “addressUsed”: “79.118.79.30”\n }\n ]\n}‘
2017-02-17 14:19:56,530:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E. args: (), kwargs: {}
2017-02-17 14:19:56,772:DEBUG:requests.packages.urllib3.connectionpool:“GET /acme/authz/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E HTTP/1.1” 200 1353
2017-02-17 14:19:56,774:DEBUG:root:Received <Response [200]>. Headers: {‘Content-Length’: ‘1353’, ‘Expires’: ‘Fri, 17 Feb 2017 14:19:41 GMT’, ‘Boulder-Request-Id’: ‘IW_Fc1yBB7d3V6ihfksWYvXl_olJHdkrc0r-JG4bZ6s’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Fri, 17 Feb 2017 14:19:41 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘GGDsIX2UVSIDX_8fASZxP2QWgGv86tKdCIANQYC78hM’}. Content: ‘{\n “identifier”: {\n “type”: “dns”,\n “value”: “www.elenadumitrache.ro”\n },\n “status”: “valid”,\n “expires”: “2017-04-18T14:08:33Z”,\n “challenges”: [\n {\n “type”: “http-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050246”,\n “token”: “4KGwVrmG5TOpqIRdIOBq3CU_hZ8bIVcQOUiesAL4gvw”\n },\n {\n “type”: “tls-sni-01”,\n “status”: “valid”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247”,\n “token”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE”,\n “keyAuthorization”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE.PKzrRiH2W1ihW8xs9EdmwXjSPcGZ3a1gS26bjYOlAa4”,\n “validationRecord”: [\n {\n “hostname”: “www.elenadumitrache.ro”,\n “port”: “443”,\n “addressesResolved”: [\n “79.118.79.30”\n ],\n “addressUsed”: “79.118.79.30”\n }\n ]\n },\n {\n “type”: “dns-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050248”,\n “token”: “iO2SlPF-Y257Egh-Hp3yMaA7ZEEXzLq69jYRIVthQXQ”\n }\n ],\n “combinations”: [\n [\n 1\n ],\n [\n 2\n ],\n [\n 0\n ]\n ]\n}‘
2017-02-17 14:19:56,775:DEBUG:acme.client:Received response <Response [200]> (headers: {‘Content-Length’: ‘1353’, ‘Expires’: ‘Fri, 17 Feb 2017 14:19:41 GMT’, ‘Boulder-Request-Id’: ‘IW_Fc1yBB7d3V6ihfksWYvXl_olJHdkrc0r-JG4bZ6s’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Fri, 17 Feb 2017 14:19:41 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘GGDsIX2UVSIDX_8fASZxP2QWgGv86tKdCIANQYC78hM’}): ‘{\n “identifier”: {\n “type”: “dns”,\n “value”: “www.elenadumitrache.ro”\n },\n “status”: “valid”,\n “expires”: “2017-04-18T14:08:33Z”,\n “challenges”: [\n {\n “type”: “http-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050246”,\n “token”: “4KGwVrmG5TOpqIRdIOBq3CU_hZ8bIVcQOUiesAL4gvw”\n },\n {\n “type”: “tls-sni-01”,\n “status”: “valid”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050247”,\n “token”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE”,\n “keyAuthorization”: “-4zX0FIwLitIoF7gUWt9ckGcc0LqpvxNYW-3jXe5trE.PKzrRiH2W1ihW8xs9EdmwXjSPcGZ3a1gS26bjYOlAa4”,\n “validationRecord”: [\n {\n “hostname”: “www.elenadumitrache.ro”,\n “port”: “443”,\n “addressesResolved”: [\n “79.118.79.30”\n ],\n “addressUsed”: “79.118.79.30”\n }\n ]\n },\n {\n “type”: “dns-01”,\n “status”: “pending”,\n “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E/665050248”,\n “token”: “iO2SlPF-Y257Egh-Hp3yMaA7ZEEXzLq69jYRIVthQXQ”\n }\n ],\n “combinations”: [\n [\n 1\n ],\n [\n 2\n ],\n [\n 0\n ]\n ]\n}‘
2017-02-17 14:19:56,778:INFO:certbot.auth_handler:Cleaning up challenges
2017-02-17 14:19:58,970:INFO:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0001_key-certbot.pem
2017-02-17 14:19:59,022:INFO:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0001_csr-certbot.pem
2017-02-17 14:19:59,043:DEBUG:certbot.client:CSR: CSR(file=’/etc/letsencrypt/csr/0001_csr-certbot.pem’, data=‘0\x82\x02\x9a0\x82\x01\x82\x02\x01\x020!1\x1f0\x1d\x06\x03U\x04\x03\x0c\x16www.elenadumitrache.ro0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xb0;\xd2\x85\xf6|\xff\xaf\x9d\x94D\xe5\xdf4x\xe7\x08g\xd1\x9d%\x7fi\x15\x0f-I\x99\xd4\x0c\xde=}\x00\x1b\x9fO\xd6R\xa0\x94\xde\xdd\xbb\x90\x13\x82\xcaw\xd6l5\xefM~\xb5\xd62\xa5\xad1\xd1\xdccjC\xd6\x1b\x8e:&\xa92\x90J\xc3\xab\xe1C\x8f\xfc3\x91\xb6\xcf\xa3\x1b\xd2\xf9\x1d\x83x\x99~}\xbe\xf2\x08O\xb6y\xc3.9’\x08W\xa9jVH)\xc6\x9a\xa3\xf2\x9c\x86I\xf5$(\xff\xc7h\x12\xfa\r\xccb\xa2\xa0\x0f\x10\x17ezB\xb4y\xa9\x1a\xb6\x8d\xf4GL\x96\x9e7\xc0U|\xcb\xb1\xd0\xf2E\xce\x89\xf2O\xce$\x97w)\xa9/\xa8$\xab\x80a\xe0[E\xe7\x8dG\x01\x90Z\xea\xd4R\x1a\x9f\xac\xaa\xdf[L\x15Q7\xea\x87\xa2\xa2\x85R\x07L\x0b\xcf\x02\xfb\xc6\x9d\x81\xa8\xab\x14\xe7\xff\xdf\x87v\xb1\x91\x8e\xdeD\x8aX0\x08\xad\xf6/$f;k\x9a\xfb\xca\x9c&‘f%\xe7\xd6\xcaU\x1a;\xa1\xea\xad\x02\x03\x01\x00\x01\xa0402\x06\t*\x86H\x86\xf7\r\x01\t\x0e1%0#0!\x06\x03U\x1d\x11\x04\x1a0\x18\x82\x16www.elenadumitrache.ro0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00P\xe1By\xfb\xf2\xcel]\xbf2\x86K\x03\xf7\x11\xd2\xccJ\xdaFT\x92e\xc9\x95q|\xc5nd\x04\x9d\xb3\xd6,\x06\xcb\xd6\xe0r\xe1\xc4\xc4e\xd8\xb2\xad\xb2\xa2)<\xf4aG\xe6\x8aMhG\xdcO\xf5\xda\x9e\x0e\xf2\x0e-\xf6f&0\xca\xfar\xe8\x8d\xa9b\xba\xc4qV\x90\xdc\xf2\xdfp@\x97\xcajT%\x1c\xd4\x0eh\x0c\x9be\xbbo\xa2\xa8\xd7&8\xc6\x86I\x80%u\xc0\x1e\x14\xf5\xdb\x87’p\x7fq\xc6\x06\xbe\x9ds\x81K\x8c\x11[\xbd1\x9d\xcd\x9c\t\xcf\x10\xf6\xa3v\x96\xef\x92\xef\xbb\xedR\xca\xef\x0e\xa7,\xff\x82\xc8\xec\xde\xa7\x93\xde\x99-\x95\\xb0\x1c8OX,reAB\x1d\x9c\x1a4\xc8\xac\x8b\xf4N21F=?\xc4\xa1\x8aVl\xa8\xe3\xde&{’\xc0\xa0\xeb\xa0a\xae\xd1h\x8d\xe0\xe9|\xf0v/^M\x93\x9b-\x83\xc68a\x95\t\xc1\x11\xc1R\xbe\x94\xcf\x8a\x13\xceg[Xy8\xd5\xbd\xf7\x1a\xb9\x81\t\xff7V’, form=‘der’), domains: [‘www.elenadumitrache.ro’]
2017-02-17 14:19:59,044:DEBUG:acme.client:Requesting issuance…
2017-02-17 14:19:59,046:DEBUG:acme.client:Serialized JSON: {“resource”: “new-cert”, “csr”: “MIICmjCCAYICAQIwITEfMB0GA1UEAwwWd3d3LmVsZW5hZHVtaXRyYWNoZS5ybzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALA70oX2fP-vnZRE5d80eOcIYGfRnSV_aRUPLUmZ1AzePX0AG59P1lKglN7du5ATgsp31mw1701-tdYypa0x0dxjakNg1huOOiapMpBKw6vhQ4_8M5G2z6Mb0vkdg3iZfn2-8ghPtnnDLjknCFepalZIKcaao_Kchkn1JCj_x2gS-g3MYqKgDxAXZXpCtHmpGraN9EdMlp43wFV8y7HQ8kXOifJPziSXdympYC-oJKuAYeBbReeNRwGQWurUUhqfrKrfW0wVUTfqh6KihVIHTAvPAvvGnYGoqxTn_9-HdrGRjt5EilgwYAit9i8kZjtrmvvKnCYnZiXn1spVGjuh6q0CAwEAAaA0MDIGCSqGSIb3DQEJDjElMCMwIQYDVR0RBBowGIIWd3d3LmVsZW5hZHVtaXRyYWNoZS5ybzANBgkqhkiG9w0BAQsFAAOCAQEAUOFCefvyzmxdvzKGSwP3EdLMStpGVJJlyZVxfMVuZASds9YsBsvW4HLhxMRl2LKtsqIpPPRhR-aKTWhH3E_12p4O8g4t9mYmMMr6cuiNqWK6xHFWkNzy33BAl8pqVCUc1A5oDJtlu2-iqNcmOMaGSYAldcAeFPXbhydwf3HGBr6dc4FLjBFbvTGdzZwJzxD2o3aW75Lvu-1Syu8Opyz_gsjs3qeT3pktlVywHDhPWCxyZUFCHZwaNMisi_ROMjFGPT_EoYpWbKjj3iZ7J8Cg66BhrtFojeDpfPB2L15Nk5stg8Y4YZUJwRHBUr6Uz4oTzmdbWHk41b33GrmBCf83Vg”}
2017-02-17 14:19:59,050:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), x5u=None, x5tS256=None, x5t=None, cty=None, alg=None, jwk=None, kid=None, typ=None, jku=None
2017-02-17 14:19:59,078:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), x5u=None, x5tS256=None, x5t=None, cty=None, nonce=None, kid=None, typ=None, jku=None
2017-02-17 14:19:59,080:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-cert. args: (), kwargs: {‘headers’: {‘Accept’: ‘application/pkix-cert’}, ‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “tQUPeZYNk9vJxIHHWRYwNicfq8Mx17mFo0-2vTcpehC_DrU8fLXv-yHSWQv8vQsTRBTX-xRNxJXNASwF7aJHb7GCjmlCCzXNoFC_FmHSmBlKWyAcJr2zth2F3cSNZR4IIjQdDQfY4WFn5pThKDMaC8_A9orGNv0QszsnTZW6bcdjLFvVY-oDZxBPf74B2VYPJxUBvzFH8hE0mQX4kse90XMFsmG0Xq_7d2T-I8sqs4M-im0aEIGXCyTgmy8JFpelm09OoJMq93wcf-xyhzINhqQscNp8VMtCX_fPgMggLMOl-QNmf06D46NBSiyv2MW5gyQWcudlM7ZCG3Fs6mop1Q”}}, “protected”: “eyJub25jZSI6ICJydGxBeWtvV1NyVmRoYXVlQlBubzJ0MkFubkVyaTFKbFpEOWlDb1ljQmVBIn0”, “payload”: “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”, “signature”: “VBi4V3raOM-iPzm09kFw2XsUizDGJWzRGdTt1qFzP3y-oeBfdEsD6RI-xO168enCxGiFrPkTo6C__mC6nPe3GGIYuXYApXdvLM2oPjWfTkfU2SblNJJDYij_CXaxk0N5TGBgHtAWczVBlukWa4kpEzojPEcwXgOMkMxV9jU_FC_cac8y_ajdN3Q3nUaYbwEQmhXD0nO7ctDNkLKfxqW29iyDGNGYNWu23gnvtG_f4-Lao5xp0KodKh0jPLxz9ZBsxUeGwrmdQ90pRBOi4yR7eqN53w-H1rJX5vhnHwX3fGRXsgyHQiKWWRfr31U3LuIyv_t3_wXfUtMte_n_3Y-EhQ”}’}
2017-02-17 14:28:16,885:DEBUG:certbot.main:Exiting abnormally:
Traceback (most recent call last):
File “/usr/bin/certbot”, line 9, in
load_entry_point(‘certbot==0.9.3’, ‘console_scripts’, ‘certbot’)()
File “/usr/lib/python2.7/dist-packages/certbot/main.py”, line 776, in main
return config.func(config, plugins)
File “/usr/lib/python2.7/dist-packages/certbot/main.py”, line 511, in run
action, lineage = _auth_from_domains(le_client, config, domains)
File “/usr/lib/python2.7/dist-packages/certbot/main.py”, line 100, in _auth_from_domains
lineage = le_client.obtain_and_enroll_certificate(domains)
File “/usr/lib/python2.7/dist-packages/certbot/client.py”, line 281, in obtain_and_enroll_certificate
certr, chain, key, _ = self.obtain_certificate(domains)
File “/usr/lib/python2.7/dist-packages/certbot/client.py”, line 263, in obtain_certificate
return (self.obtain_certificate_from_csr(domains, csr, authzr=authzr)
File “/usr/lib/python2.7/dist-packages/certbot/client.py”, line 234, in obtain_certificate_from_csr
authzr)
File “/usr/lib/python2.7/dist-packages/acme/client.py”, line 312, in request_issuance
headers={‘Accept’: content_type})
File “/usr/lib/python2.7/dist-packages/acme/client.py”, line 647, in post
response = self._send_request(‘POST’, url, data=data, **kwargs)
File “/usr/lib/python2.7/dist-packages/acme/client.py”, line 606, in _send_request
response = self.session.request(method, url, *args, **kwargs)
File “/usr/lib/python2.7/dist-packages/requests/sessions.py”, line 475, in request
resp = self.send(prep, **send_kwargs)
File “/usr/lib/python2.7/dist-packages/requests/sessions.py”, line 596, in send
r = adapter.send(request, **kwargs)
File “/usr/lib/python2.7/dist-packages/requests/adapters.py”, line 473, in send
raise ConnectionError(err, request=request)
ConnectionError: (‘Connection aborted.’, BadStatusLine("’’",))

2

Hmm, looks like everything goes according to plan including validating the FQDN, until certbot sends a request to the Let’s Encrypt server to actually get a certificate… With a strange (can’t make anything of it anyway) error… According to Google’s Certificate Transparency reports, Let’s Encrypt didn’t actually issue the certificate…

How many times did you try? Just once? Or does it fail every single time on the same spot?

3

It fail every single time on the same spot. same error.

4

Does it take a relative long time before the error occurs? You can run certbot with the -v switch to actually see more debug information while the program runs.

Also, perhaps updating httplib can be useful:

apt-get install --only-upgrade python-httplib2

5

It stops here:

Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-cert. args: (), kwargs: {‘headers’: {‘Accept’: ‘application/pkix-cert’}, ‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “tQUP…1Q”}}, “protected”: “eyJub…VJqbVhrIn0”, “payload”: “eyJy…In0”, “signature”: “ZUy…56mTrEd_wf-A”}’}

waits for 8 minutes and then gives the error.

the previous requests are answered:
Sending GET request to https://acme-v01.api.letsencrypt.org/directory …
Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz …
Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz …
Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/URgh-tJh_EE27gnXejPmkQ1in3lKbps7i0fpyyePC0E …

Only the last one is stuck.

python-httplib2 wasn’t installed. i install it but there is no change.

6

Hm, perhaps I found a wrong dependency…

IMO, it could be something like a MTU issue between your server and Let’s Encrypt. Because the first requests are small and are fine. But the post to /new-cert/ is bigger, because it sends the signed CSR.

You might want to try and read http://packetlife.net/blog/2008/aug/18/path-mtu-discovery/ and try to make a tracepath acme-v01.api.letsencrypt.org and see what happens.

2 Likes
7

It is a MTU issue. I changed MTU on my server to 1000 and it worked.
I installed the certificate and everything looks fine.
I guess the issue is between my server and my asus router. I’ll investigate further tomorrow, but for now i’m good.

Thank you very much for your help!

2 Likes
8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.