Error renewing certificate "Error getting validation data", config unchanged since last renewal but OS was updated

My domain is:
selfhome.nsupdate.info

I ran this command:
sudo certbot renew --non-interactive --agree-tos -v

It produced this output:

Processing /etc/letsencrypt/renewal/selfhome.nsupdate.info.conf
 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 Certificate is due for renewal, auto-renewing...
 Plugins selected: Authenticator apache, Installer apache
 Renewing an existing certificate for selfhome.nsupdate.info
 Performing the following challenges:
 http-01 challenge for selfhome.nsupdate.info
 Waiting for verification...
 Challenge failed for domain selfhome.nsupdate.info
 http-01 challenge for selfhome.nsupdate.info

 Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
   Domain: selfhome.nsupdate.info
   Type:   connection
   Detail: x.x.x.x: Fetching http://selfhome.nsupdate.info/.well-known/acme-challenge/tT5L6N1-85aWbeXqONHo4SC7LFR7eu5j8vROSyzqPLU: Error getting validation data

 Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

 Cleaning up challenges
 Failed to renew certificate selfhome.nsupdate.info with error: Some challenges have failed.

 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 All renewals failed. The following certificates could not be renewed:
   /etc/letsencrypt/live/selfhome.nsupdate.info/fullchain.pem (failure)
 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 1 renew failure(s), 0 parse failure(s)
 Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version):
Server version: Apache/2.4.52 (Ubuntu)

The operating system my web server runs on is (include version):
Description: Ubuntu 22.04.1 LTS

My hosting provider, if applicable, is:
n/a

I can login to a root shell on my machine (yes or no, or I don't know):
yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
n/a

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 1.21.0

Other information:

  • I have successfully updated my certificate several times successfully in the past. Nothing has changed network wise however I was recently forced upgrade Ubuntu due to end of life support.
  • I have not changed my apache configuration since my last successful cert renewal.
  • I have verified that port 80 is open and I can access the default apache page on my domain.
  • I reran the command with -v but it produced the same output.
  • I read several other users with similar issues but didn't find they applied to my case.

Here is my apachectl -S

VirtualHost configuration:
*:55557                selfhome.nsupdate.info (/etc/apache2/sites-enabled/000-default-le-ssl.conf:2)
*:443                  selfhome.nsupdate.info (/etc/apache2/sites-enabled/000-default-le-ssl.conf:2)
*:80                   ubuntu.lan (/etc/apache2/sites-enabled/000-default.conf:1)
ServerRoot: "/etc/apache2"
Main DocumentRoot: "/var/www/html"
Main ErrorLog: "/var/log/apache2/error.log"
Mutex watchdog-callback: using_defaults
Mutex rewrite-map: using_defaults
Mutex ssl-stapling-refresh: using_defaults
Mutex ssl-stapling: using_defaults
Mutex proxy: using_defaults
Mutex ssl-cache: using_defaults
Mutex default: dir="/var/run/apache2/" mechanism=default
PidFile: "/var/run/apache2/apache2.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="www-data" id=33
Group: name="www-data" id=33

Any help that can be provided to help me renew my cert would be greatly appreciated.

Please show these files:

3 Likes

From your local network or also remote? Because currently port 80 and port 443 are closed while port 55557 seems to work perfectly.

3 Likes

Here is what I see with nmap

$ nmap -Pn selfhome.nsupdate.info
Starting Nmap 7.80 ( https://nmap.org ) at 2022-12-02 15:03 UTC
Nmap scan report for selfhome.nsupdate.info (198.54.132.59)
Host is up (0.041s latency).
rDNS record for 198.54.132.59: static-198-54-132-59.cust.tzulo.com
Not shown: 998 filtered ports
PORT    STATE  SERVICE
80/tcp  closed http
443/tcp closed https

Nmap done: 1 IP address (1 host up) scanned in 7.59 seconds
1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.