My domain is: urbanbeach.com
I ran this command:
certbot renew --cert-name urbanbeach.com
It produced this output:
/root/.pyenv/versions/3.4.2/lib/python3.4/site-packages/cryptography/hazmat/bindings/openssl/binding.py:163: CryptographyDeprecationWarning: OpenSSL version 1.0.1 is no longer supported by the OpenSSL project, please upgrade. A future version of cryptography will drop support for it.
utils.CryptographyDeprecationWarning
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/urbanbeach.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Plugins selected: Authenticator webroot, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for www.urbanbeach.com
Waiting for verification...
Challenge failed for domain www.urbanbeach.com
http-01 challenge for www.urbanbeach.com
Cleaning up challenges
Attempting to renew cert (urbanbeach.com) from /etc/letsencrypt/renewal/urbanbeach.com.conf produced an unexpected error: Some challenges have failed.. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/urbanbeach.com/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/urbanbeach.com/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: www.urbanbeach.com
Type: unauthorized
Detail: 2606:4700:3036::ac43:98bb: Invalid response from
http://www.urbanbeach.com/.well-known/acme-challenge/Paszt_gPgOOlURsq8MpiqbmZ-3fZYtLPBriVsagqDNM:
404
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.
My web server is (include version):
# apachectl -v
Server version: Apache/2.2.22 (Ubuntu)
Server built: Apr 9 2019 20:25:49
The operating system my web server runs on is (include version):
# uname -srm
Linux 3.5.0-54-generic x86_64
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know):
Yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
# certbot --version or certbot-auto --version
/root/.pyenv/versions/3.4.2/lib/python3.4/site-packages/cryptography/hazmat/bindings/openssl/binding.py:163: CryptographyDeprecationWarning: OpenSSL version 1.0.1 is no longer supported by the OpenSSL project, please upgrade. A future version of cryptography will drop support for it.
utils.CryptographyDeprecationWarning
certbot 0.35.1
The above is one of the domains that fails in renewing. I’m aware of the warnings. I prefer not to go through the hours of hassle to upgrade OpenSSL, Ubuntu or anything to eliminate the warnings. I want to migrate my websites off of my hosted server and move them to another site, were I do not need to upgrade or fix anything. To export my site, I need the certificates to work.
I’ve been renewing the certificates successfully for my domains for years now. Then it stopped renewing for one of my domains. I don’t know why.
Here’s one of the domains that successfully renews:
# certbot renew --cert-name avvau.com
/root/.pyenv/versions/3.4.2/lib/python3.4/site-packages/cryptography/hazmat/bindings/openssl/binding.py:163: CryptographyDeprecationWarning: OpenSSL version 1.0.1 is no longer supported by the OpenSSL project, please upgrade. A future version of cryptography will drop support for it.
utils.CryptographyDeprecationWarning
Saving debug log to /var/log/letsencrypt/letsencrypt.log
No certificate found with name avvau.com (expected /etc/letsencrypt/renewal/avvau.com.conf).
root@s-vexxhost:~# certbot renew --cert-name avvau.com-0002
/root/.pyenv/versions/3.4.2/lib/python3.4/site-packages/cryptography/hazmat/bindings/openssl/binding.py:163: CryptographyDeprecationWarning: OpenSSL version 1.0.1 is no longer supported by the OpenSSL project, please upgrade. A future version of cryptography will drop support for it.
utils.CryptographyDeprecationWarning
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/avvau.com-0002.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Plugins selected: Authenticator webroot, Installer None
Renewing an existing certificate
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
new certificate deployed without reload, fullchain is
/etc/letsencrypt/live/avvau.com-0002/fullchain.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations, all renewals succeeded. The following certs have been renewed:
/etc/letsencrypt/live/avvau.com-0002/fullchain.pem (success)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
