My Domain Name is : bdnetbreeze.blackdragonnetworks.com
It produced this output:
Processing /etc/letsencrypt/renewal/bdnetbreeze.blackdragonnetworks.com.conf
Cert is due for renewal, auto-renewing...acme-v02.api.letsencrypt.org bdnetbreeze.blackdragonnetworks.com bdnetbreeze.blackdragonnetworks.com bdnetbreeze.blackdragonnetworks.com bdnetbreeze.blackdragonnetworks.com bdnetbreeze.blackdragonnetworks.com with error: Some challenges have failed.
All renewals failed. The following certificates could not be renewed:
1 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:
I looked up my most recent certificate and downloaded it. Number Certificate 8516514919.https://bdnetbreeze.blackdragonnetworks.com:8082 going again. It will expire April 22 according to the website.
Here is my log output::r3.o.lencr.org -url http://r3.o.lencr.org bdnetbreeze.blackdragonnetworks.com bdnetbreeze.blackdragonnetworks.com
Osiris
March 30, 2023, 8:51pm
3
I've moved your posts to their own separate thread. Please don't hijack other peoples threads.
You say nginx runs on port 8082? How's that? Can you explain more about your setup in detail, as I'm also seeing an Apache webserver listening on port 80?
The certificate validation for the http-01 challenge always starts on port 80. It seems Apache just redirects to HTTPS (on default port 443, which is mandatory for the challenge when following HTTP to HTTPS redirects), where a nginx server is listening.
4 Likes
# renew_before_expiry = 30 days
version = 1.9.0
archive_dir = /etc/letsencrypt/archive/bdnetbreeze.blackdragonnetworks.com
cert = /etc/letsencrypt/live/bdnetbreeze.blackdragonnetworks.com/cert.pem
privkey = /etc/letsencrypt/live/bdnetbreeze.blackdragonnetworks.com/privkey.pem
chain = /etc/letsencrypt/live/bdnetbreeze.blackdragonnetworks.com/chain.pem
fullchain = /etc/letsencrypt/live/bdnetbreeze.blackdragonnetworks.com/fullchain.pem
# Options used in the renewal process
[renewalparams]
authenticator = nginx
account = 73f5f7d43c9116eea6f3a761ed7e7155
server = https://acme-v02.api.letsencrypt.org/directory
installer = nginx
On your system you have both Apache and nginx; as @Osiris noted.
See here for HTTP-01 challenge details.< TOKEN > being put where nginx's can server https://bdnetbreeze.blackdragonnetworks.com/.well-known/acme-challenge/` < TOKEN >`
I note the HTTP-01 challenge starting on Port 80 seems to be Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips;
$ curl -Ii http://bdnetbreeze.blackdragonnetworks.com/.well-known/acme-challenge/sometestfile
HTTP/1.1 301 Moved Permanently
Date: Fri, 31 Mar 2023 19:53:15 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
Location: https://bdnetbreeze.blackdragonnetworks.com/.well-known/acme-challenge/sometestfile
Content-Type: text/html; charset=iso-8859-1
And is redirected to HTTPS Port 443 nginx
$ curl -k -Ii https://bdnetbreeze.blackdragonnetworks.com/.well-known/acme-challenge/sometestfile
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Fri, 31 Mar 2023 19:53:18 GMT
Content-Type: text/html
Content-Length: 3650
Connection: keep-alive
ETag: "636d2d22-e42"
1 Like
So you are telling me I need to put my "Token" in the Apache server directory?
So I should renew the certificate using the apache switch?
I used the : Certbot certonly command and picked the apache option. I think I have my certs renewed.
lrwxrwxrwx 1 root root 60 Apr 5 15:42 cert.pem -> ../../archive/bdnetbreeze.blackdragonnetworks.com/cert14.pem
rg305
April 5, 2023, 9:04pm
10
Please show:certbot certificates
3 Likes
system
May 5, 2023, 9:05pm
11
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.