My domain is: monoviajero.com I ran this command: lego --tls --email="my@email.com" --domains="monoviajero.com" --domains="www.monoviajero.com" --path="/opt/bitnami/letsencrypt" renew It produced this output: 2019/12/02 20:37:36 [INFO] [monoviajero.com] acme: Trying renewal with -48 hours remain…

I still see nginx on IPv6 port 443. I’ve tested from multiple locations. That IPv6 address is owned by 1&1, not EC2. Are you really sure it’s correct? Even the port 80 response is not correct: $ curl -X GET -I -6 http://monoviajero.com HTTP/1.1 403 Forbidden Content-Type: text/html Content-Length…

If you wish to renew using TLS-ALPN, you would need to first stop your Apache webserver. This is because both Apache and Lego’s TLS-ALPN server require exclusive use of port 443 during the renewal process. Have you been doing that?

Yes, I stop Apache server before.

The error from Let’s Encrypt is a bit vague and unhelpful, but I think I’ve identified the cause. When accessing your domain over its IPv6 address and port 443, it doesn’t seem to go to your Apache server (or when Apache isn’t running, Lego). Take for instance: $ curl -X GET -I -6 https://monovia…

I’m using AWS EC2 and I’m not sure if IPv6 is assigned. Anyway 2001:8d8:100f:f000::238 seems to be correct address. Regarding Nginx response maybe your request was made just when lego is running because in my case the same requests obtain the following results (when Apache & Wordpress is running): …

You have a right ! I just see here the following warning: Fatal: Check of /.well-known/acme-challenge/random-filename has different answers checking ipv6 / ipv4. Ipv6 doesn't have the expected result http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 validation may not wor…

You made my day !!! Finally the problem was with bad IPv6 AAAA record. Just after removing AAAA records from DNS, certificate renews without any problem. As shown in warning that I posted before, LetsEncrypt prefers IPv6 instead IPv4. Thanks a lot for your help !!!

Error 400 renewing expired certificate

Help

Topic		Replies	Views
Cannot Renew certificate and showing error while trying to re-install Help	7	5961	May 14, 2019
Could not obtain certificates & Permission Denied Help	6	2327	February 5, 2020
Error: Cannot negotiate ALPN protocol when trying to renew my SSL certificate Help	17	1145	January 20, 2025
Error: 403 while renew cert (AWS EC2 NGINX Bitnami server) Help	24	1924	October 21, 2020
Unable to renew my ssl certificates Help	6	1895	August 12, 2020

Error 400 renewing expired certificate

Related topics