Errors during renewing Certificate

[WolfgangR]

I got an email, that our certificat has not been renewed. When I try certbot renew I get an Error Message.

Attempting to renew cert (amstetten.at) from /etc/letsencrypt/renewal/amstetten.at.conf produced an unexpecte d error: Failed authorization procedure. amstetten.at (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://amstetten.at/.well-known/acme -challenge/8YV1XpaGnt2iap-4yi4f_zGrE843VZV8Il4xFc48Z6w: Error getting validation data. Skipping.

Can anybody help me? I think I did not change anything, what could cause this problem?
Thank you and best regards,
Wolfgang

[JuergenAuer]

Hi @WolfgangR

@WolfgangR

Failed authorization procedure. amstetten.at (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://amstetten.at/.well-known/acme -challenge/8YV1XpaGnt2iap-4yi4f_zGrE843VZV8Il4xFc48Z6w: Error getting validation data. Skipping.

Letsencrypt tries to check your domain - and can’t. I can connect your domain, so it looks like a blocking firewall with a regional filter.

Find that filter and remove it. Letsencrypt must be able to connect your domain via http.

[WolfgangR]

Thank you for the fast response. At the moment I have no idea, why amstetten.at can not be reached? I see many accesses from different external IPs. Will investigate on that further.

Edit: Looks like the Firewall IPS does not like the Access from the letsencrypt-Server any more. After disabling the Intrusion Protection System on the firewall the update worked fine again. Strange …