Certbot stopped working with nginx

Help
2

Hello @kerabromsmu, welcome to the Let's Encrypt community. :slightly_smiling_face:

Using the online tool Let's Debug yields these results https://letsdebug.net/dimage.se/1952442?debug=y

MultipleIPAddressDiscrepancy
WARNING
dimage.se has multiple IP addresses in its DNS records. While they appear to be accessible on the network, we have detected that they produce differing results when sent an ACME HTTP validation request. This may indicate that some of the IP addresses may unintentionally point to different servers, which would cause validation to fail.
[Address=2a01:4f8:d0a:1231::2,Address Type=IPv6,Server=Apache,HTTP Status=404] vs [Address=217.31.190.236,Address Type=IPv4,Server=nginx/1.24.0,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404]

There is more than one IP Address for the domain name (which is fine), but they do not all reply the same.

HTTPRecords
DEBUG
A and AAAA records found for this domain
dimage.se. 0 IN A 217.31.190.236
dimage.se. 0 IN AAAA 2a01:4f8:d0a:1231::2

Edit:
Using curl

Using IPv4

>curl -4 -Ii http://dimage.se/.well-known/acme-challenge/C4Sg5MD2YiOgtFvb7cuOSnd3aDobuWvlB0zzRz6e
HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0
Date: Mon, 13 May 2024 23:43:29 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://dimage.se/.well-known/acme-challenge/C4Sg5MD2YiOgtFvb7cuOSnd3aDobuWvlB0zzRz6e

Using IPv6, note the difference from above

>curl -6 -Ii http://dimage.se/.well-known/acme-challenge/C4Sg5MD2YiOgtFvb7cuOSnd3aDobuWvlB0zzRz6e
HTTP/1.1 404 Not Found
Date: Mon, 13 May 2024 23:43:36 GMT
Server: Apache
Content-Type: text/html; charset=iso-8859-1

Using IPv4 for the redirect

> curl -4 -k -Ii https://dimage.se/.well-known/acme-challenge/C4Sg5MD2YiOgtFvb7cuOSnd3aDobuWvlB0zzRz6e
HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Mon, 13 May 2024 23:43:52 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 153
Connection: keep-alive

Edit: also see these as well

3 Likes