Error getting validation data - certbot

[toyo]

Hi guys,

Automatic and manual certificate renewal fail for this domain: www.cloud.armada-it.net.
The domain is been up and running for almost an year, multiple automatic renewals were made without problem.
The webserver is nginx, dedicated server, running ubuntu.

The result error is as follows:

“Attempting to renew cert from /etc/letsencrypt/renewal/cloud.armada-it.net.conf produced an unexpected error: Failed authorization procedure. www.cloud.armada-it.net (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching https://cloud.armada-it.net/.well-known/acme-challenge/ekNALlSHQUmcobzkN8xxlVgFoM49P3alHFwNJZ0Jcxk: Error getting validation data, cloud.armada-it.net (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching https://cloud.armada-it.net/.well-known/acme-challenge/shlKXHI_e_mYL7xsJvkdd70Pa-gxQ2uwbmXe5VEmKX8: Error getting validation data. Skipping.”

This is what the process overview returns:
Domain: www.cloud.armada-it.net
Type: connection
Detail: Fetching
https://cloud.armada-it.net/.well-known/acme-challenge/ekNALlSHQUmcobzkN8xxlVgFoM49P3alHFwNJZ0Jcxk:
Error getting validation data

I double checked and made sure is not about access rights or anything else. Help ?!

[cpu]

Hi @toyo,

@toyo

Fetching https://cloud.armada-it.net/.well-known/acme-challenge/ekNALlSHQUmcobzkN8xxlVgFoM49P3alHFwNJZ0Jcxk: Error getting validation data, cloud.armada-it.net (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching https://cloud.armada-it.net/.well-known/acme-challenge/shlKXHI_e_mYL7xsJvkdd70Pa-gxQ2uwbmXe5VEmKX8: Error getting validation data. Skipping."

It looks to me like the initial HTTP-01 challenge request from Let's Encrypt is arriving on port 80 but being redirected to port 443. When I try and access: https://cloud.armada-it.net/.well-known/acme-challenge/ekNALlSHQUmcobzkN8xxlVgFoM49P3alHFwNJZ0Jcxk myself I get a 404 page served by the OwnCloud application. It seems likely that this application won't be configured to return the HTTP-01 challenge contents that the validation server expects to find.

I'm not sure of a solution but hopefully this will help you narrow down what could have changed on your end. Good luck!