Error: During secondary validation: Remote PerformValidation RPC failed

Help
1

I ran this command: certbot renew --dry-run

It produced this output:

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain:
Type: serverInternal
Detail: During secondary validation: Remote PerformValidation RPC failed

Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.

Failed to renew certificate with error: Some challenges have failed.

All simulated renewals failed.

1 renew failure(s), 0 parse failure(s)
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

2

That is an unusual error. Do you limit access to your server by country or geography? Because Let's Encrypt recently started using more points around the world to validate from. Seeing "Seconday validation" in the error message means this might be happening to you.

People who previously only allowed USA (and their home countries) would no longer work.

3 Likes
3

That's an internal error with Let's Encrypt's servers. Are you consistently getting it, or does it work if you try again?

4 Likes
4

I am getting the same error

1 Like
5

Another report here:

I'm guessing that staging is down.

5 Likes
6

I'm getting same RPC failed error from my own test server using --dry-run

3 Likes
7

We've identified a change we made (to our own certs, doh!) has broken the secondary validation.

We're going to roll that back now.

This will break certbot --dry-run and certbot --staging (or other uses of staging) commands only -- you should be able to renew still otherwise

4 Likes
8

For the staging environment only, correct?

3 Likes
9

Yes, staging only

3 Likes
10

It's fixed

6 Likes
11

It's working now... Thx

3 Likes
12

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.