Hi, I'm relatively new to LetsEncrypt and certbot, and struggling to resolve this issue alone - treading cautiously so as not to trigger another 1 week lockout. Any help would be much appreciated.
Context: I have three virtual hosts set up on this server. No issues since the initial certificates created a few months ago. I renewed all of them at the same time (a few days late, after expiry) and two of three succeeded but this one failed the http-01 challenge with a 404 response. The three sites are supposed to be configured the same as one another, but it seems something has diverted with this site.
My domain is:
tranquilitynode.com
I ran this command:
sudo certbot --dry-run --apache certonly -n -d tranquilitynode.com
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator apache, Installer apache Obtaining a new certificate Performing the following challenges: http-01 challenge for tranquilitynode.com Waiting for verification... Challenge failed for domain tranquilitynode.com http-01 challenge for tranquilitynode.com Cleaning up challenges Some challenges have failed. IMPORTANT NOTES: - The following errors were reported by the server: Domain: tranquilitynode.com Type: unauthorized Detail: Invalid response from http://tranquilitynode.com/.well-known/acme-challenge/vSP7L4ROxwlIgMehWv_5xrJDWGhtZUcQWWLpY3linJU [3.8.59.189]: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p" To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address.
My web server is (include version):
Apache/2.4.41 (Ubuntu)
The operating system my web server runs on is (include version):
Ubuntu 20.04.2 LTS
My hosting provider, if applicable, is:
n/a
I can login to a root shell on my machine (yes or no, or I don't know):
yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 0.40.0
$ cat /etc/apache2/sites-enabled/tranquilitynode.com.conf
<VirtualHost *:80>
ServerName tranquilitynode.com
ServerAlias www.tranquilitynode.com
DocumentRoot /var/www/vhosts/tranquilitynode.com
ServerAdmin <redacted>@tranquilitynode.com
<Directory /var/www/vhosts/tranquilitynode.com>
AllowOverride All
</Directory>
RewriteEngine on
RewriteCond %{SERVER_NAME} =tranquilitynode.com [OR]
RewriteCond %{SERVER_NAME} =www.tranquilitynode.com
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>
$ cat /etc/apache2/sites-enabled/tranquilitynode.com-le-ssl.conf
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName tranquilitynode.com
ServerAlias www.tranquilitynode.com
DocumentRoot /var/www/vhosts/tranquilitynode.com
ServerAdmin <redacted>@tranquilitynode.com
<Directory /var/www/vhosts/tranquilitynode.com>
AllowOverride All
</Directory>
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/tranquilitynode.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/tranquilitynode.com/privkey.pem
</VirtualHost>
</IfModule>
