Creating certificates with --nginx works. Renew or certonly doesn't

https://pastebin.com/3WrGijhP

My bad. I accidentally posted from the wrong end of the file. Sleep deprivation.

Something is still missing line 805 just cuts off.

Please create a new log file.
And upload that.

https://pastebin.com/Vs1a9aR8

Will figure out creating the log file, but this the result of certbot renew --dry-run -vv

It may have reached a limit and can't even grow anymore.

OK here is the problem now:
[HTTP connections are failing]

Detail: Fetching http://fekle.in/.well-known/acme-challenge/W3RCYUFMIKpjxiAsIWDkbfdRwEmaS5rDYKxkPBQV67s: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.vidyut.net/.well-known/acme-challenge/T3P7hzJz9qxmliZf49MrnNQ9bATu1Df2JsQVWTgACo8: Timeout during connect (likely firewall problem)
Detail: Fetching http://aamjanata.in/.well-known/acme-challenge/x709isMxi0FyZcjJ5XNFM_BvdawkZUCeG5OUg_S5ee0: Timeout during connect (likely firewall problem)
Detail: Fetching http://homeschoolingindia.in/.well-known/acme-challenge/_zwUK13JYIK3_b3cVxG35TWd6jWPeHTa8C9bxmMEop8: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.vidyut.info/.well-known/acme-challenge/p-XTT4PxhkeEE3gu0UWavpE28fNXn9KYCeCHLRzuMAY: Timeout during connect (likely firewall problem)
Detail: Fetching http://vidyut.net/.well-known/acme-challenge/CYrjEe_ft0e695k6sw_K2lzN5s90RNlN8yAKxm928AU: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.homeschoolingindia.in/.well-known/acme-challenge/EiAOpTmCdvORHuc2Q9kHfw-XucYIWkTdcTN3_fmCQy4: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.aamjanata.com/.well-known/acme-challenge/7aV4FGaLTvGdQbeQ2DmnTBKMSCKrMXP_cXjXCojAxRc: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.digitalindia.watch/.well-known/acme-challenge/rtfvxoO9SQolez0W2xxKfIwoys318o6AotdsgG7yll8: Timeout during connect (likely firewall problem)
Detail: Fetching http://vidyut.info/.well-known/acme-challenge/0Vq-uMJPk-wT3ePib8P16NFgevJ3Rthkynm2p7qLpDs: Timeout during connect (likely firewall problem)

But it should have been using the --webroot setting that worked to get the cert!!!
hmm…

vidyut@laptop:~$ curl -I http://aamjanata.com/.well-known/test.html
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Feb 2019 10:28:54 GMT
Content-Type: text/html
Content-Length: 7
Last-Modified: Tue, 12 Feb 2019 19:57:48 GMT
Connection: keep-alive
ETag: “5c63253c-7”
Accept-Ranges: bytes

vidyut@laptop:~$ curl -I http://aamjanata.com/.well-known/acme-challenge/test.html
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Feb 2019 10:29:01 GMT
Content-Type: text/html
Content-Length: 7
Last-Modified: Tue, 12 Feb 2019 20:19:19 GMT
Connection: keep-alive
ETag: “5c632a47-7”
Accept-Ranges: bytes

Similar for all the domains. Didn’t post results for all, because pointlessly lengthy. Works normally. Can access in browser, but certbot --dry-run and renew --dry-run both unable to find them. Also worked when creating the combined certificates - twice - at first shot.

Lets test with this one domain:

Please place a file as follows:
mkdir /var/www/ajin/.well-known
mkdir /var/www/ajin/.well-known/acme-challenge
echo "testing" > /var/www/ajin/.well-known/acme-challenge/1234

We should be able to see via:
http://aamjanata.in/.well-known/acme-challenge/1234

See for yourself too. I can see.

I did see it too:
wget http://aamjanata.in/.well-known/acme-challenge/1234
Saving to: ‘1234’
more 1234
testing

1 Like

Try this:
certbot renew --installer null --dry-run -vv

We managed to get a new cert but I believe errors like this one are still haunting us...

https://pastebin.com/240qGHF9 :no_mouth:

Don't even know where the vidyut.info.conf file comes from. Deleted before. Got recreated. Deleted again. No longer there, but still creating problems. There should only be vidyut.info-0001

There IS no vidyut.info.conf anymore

# ls /etc/letsencrypt/renewal/
vidyut.info-0001.conf

Should I try

for all the individual domains?

No!

1 Like

This is confusing; as it should have produced files like the one we tested before:

Creating root challenges validation dir at /var/www/vn/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/af/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/vin/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/ajin/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/map/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/ni/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/vin/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/fl/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/ajin/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/af/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/diwdru/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/aj/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/diwdru/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/hs/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/aj/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/hs/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/aj/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/fl/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/ni/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/aj/.well-known/acme-challenge
Creating root challenges validation dir at /var/www/vn/.well-known/acme-challenge
Attempting to save validation to /var/www/af/.well-known/acme-challenge/PmBICi601rd9iwjD8Lfs4mO8xRg46u8dzlU54p3XB8I
Attempting to save validation to /var/www/aj/.well-known/acme-challenge/0eU2-keUh6DR9t3UgN0TyL77pVKJZEJgTfPdnpPqyD4
Attempting to save validation to /var/www/ajin/.well-known/acme-challenge/-1nQNjc4tcWBIkef6dPc0s5I9VZgwLuVIPVm5uXsopk
Attempting to save validation to /var/www/diwdru/.well-known/acme-challenge/zSQHYe7p9kjcl5O572-X9TVJZUmjBm4Qu2cEC07NbRo
Attempting to save validation to /var/www/fl/.well-known/acme-challenge/RqSkrZ9wgLofrwccz3XgwktknYAnpd_jEV11EeOTw2Q
Attempting to save validation to /var/www/hs/.well-known/acme-challenge/K2uZfkwTvry2U1b7jEeQodIwEGFOATIEmprZGBgX8rU
Attempting to save validation to /var/www/map/.well-known/acme-challenge/8vb6WAL9vCjRCQuMHXrdOKKNOJCgZ8VwE8fsSikYPlY
Attempting to save validation to /var/www/ni/.well-known/acme-challenge/F-9Dq4_G1vSdk91DFNKEN7F_oIKLZxaq2_N2_Cx7cFM
Attempting to save validation to /var/www/vin/.well-known/acme-challenge/vfXISZiH-Lksmx8GOrvFt0vm3W5rXzuv5TM_Ll_2AZI
Attempting to save validation to /var/www/vn/.well-known/acme-challenge/mtAlSi9QZUHAwxc5R16Io_nAecrv_7ISEfoDjA515tk
Attempting to save validation to /var/www/aj/.well-known/acme-challenge/alCgzfGhY0ESCZBga39QJcPFU703IdpR4-jOWAoYfzg
Attempting to save validation to /var/www/af/.well-known/acme-challenge/s-LUeRrJpNR3PVPjuohuv7_GFpBVql30clShAtwCPUY
Attempting to save validation to /var/www/aj/.well-known/acme-challenge/6f3QhN9AswA15EerlOkCFpDCH7cM1cdeIykFIzzjDYI
Attempting to save validation to /var/www/ajin/.well-known/acme-challenge/wypFslfVw8dBZTtYuI4kW1esWkikEDTknBX8L1ZCKjA
Attempting to save validation to /var/www/diwdru/.well-known/acme-challenge/whEiWqXVvwLPvoTXs5zb-IdEL9csQp0CtrLyWwSzQgU
Attempting to save validation to /var/www/fl/.well-known/acme-challenge/o2tI4sC6a7CdOkv8xpxgB1IC3K9UzfvZpTR4FIEAPQ4
Attempting to save validation to /var/www/hs/.well-known/acme-challenge/KNvSiSkCIDM6Qes-wTnusT6g8X-q1VdNQBew0mftIOM
Attempting to save validation to /var/www/ni/.well-known/acme-challenge/mdj5OPro90N07Ynotuou5Za6b1yUYVVFB7JBrqIK70k
Attempting to save validation to /var/www/vin/.well-known/acme-challenge/wfYJ4d9tFgk3D0r40fm9XDyUzLp4mahjtzLIx7k-HCs
Attempting to save validation to /var/www/vn/.well-known/acme-challenge/aG1qoNkqxLa2EGnnzWf3Z6u83VhfxWktYibrTVkXqwM
Attempting to save validation to /var/www/aj/.well-known/acme-challenge/tAbsTbJ9KPYaDjjdEebsXrc6IhaEVVduO7xasAXwQiQ

ok… not doing. Just thought that if the residual memories/records of the separate certificates are creating problems, maybe deleting those non existent certs may fix them.

You mean the files haven't been created? No idea why they were created when making certs but not for renewal. Folder permissions/ownership is the same as always + worked while making the certs.

This is the problem:

Detail: Fetching http://vidyut.net/.well-known/acme-challenge/mtAlSi9QZUHAwxc5R16Io_nAecrv_7ISEfoDjA515tk: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.vidyut.info/.well-known/acme-challenge/wfYJ4d9tFgk3D0r40fm9XDyUzLp4mahjtzLIx7k-HCs: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.digitalindia.watch/.well-known/acme-challenge/whEiWqXVvwLPvoTXs5zb-IdEL9csQp0CtrLyWwSzQgU: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.homeschoolingindia.in/.well-known/acme-challenge/KNvSiSkCIDM6Qes-wTnusT6g8X-q1VdNQBew0mftIOM: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.wide-aware.com/.well-known/acme-challenge/tAbsTbJ9KPYaDjjdEebsXrc6IhaEVVduO7xasAXwQiQ: Timeout during connect (likely firewall problem)
Detail: Fetching http://nisarga.info/.well-known/acme-challenge/F-9Dq4_G1vSdk91DFNKEN7F_oIKLZxaq2_N2_Cx7cFM: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.aamjanata.in/.well-known/acme-challenge/wypFslfVw8dBZTtYuI4kW1esWkikEDTknBX8L1ZCKjA: Timeout during connect (likely firewall problem)
Detail: Fetching http://digitalindia.watch/.well-known/acme-challenge/zSQHYe7p9kjcl5O572-X9TVJZUmjBm4Qu2cEC07NbRo: Timeout during connect (likely firewall problem)
Detail: Fetching http://homeschoolingindia.in/.well-known/acme-challenge/K2uZfkwTvry2U1b7jEeQodIwEGFOATIEmprZGBgX8rU: Timeout during connect (likely firewall problem)
Detail: Fetching http://www.aadhaar.fail/.well-known/acme-challenge/s-LUeRrJpNR3PVPjuohuv7_GFpBVql30clShAtwCPUY: Timeout during connect (likely firewall problem)

Show me one of those vhost config file for port 80 (any one of them).

They are all like this - using includes.

This is not complete - I think I covered this before.

Please show a current
global/one-type.conf
file.