A quick preface: I've had certbot renew manually working perfectly fine for the past 4 years, and I haven't changed anything since - our websites are still up, and it seems the certificate was unable to renew for reasons I apparently can't even begin to understand. I have tested (due to log data) t…

And now for the smoking gun; potentially a firewall issue. $ curl -Ii http://w3.dmat.ufrr.br/.well-known/acme-challenge/sometestfile -A "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" curl: (56) Recv failure: Connection reset by peer $ curl -Ii http://w3.d…

[image] Bruce5051: potentially a firewall issue. Yes, very sus output. Is there a Palo Alto firewall in use?

Guys ( @Bruce5051 + rg305), first of all, thanks !! I got the nginx response 403 (forbidden) in non-existing server struture. Don't know, if that different of 404 error implies certbot to not working. I have doubts that TI people has made any change in firewall... My big doubt is why that stops wor…

The difference between HTTP status codes 403 and 404. [image] 403 Forbidden - HTTP | MDN The HTTP 403 Forbidden response status code indicates that the server understands the request but refuses to authorize it. [image] HTTP 403 Pages for logg…

I guess the server is responding HTTP 404 correctly. But Lets Debug is still responding not ok. https://letsdebug.net/w3.dmat.ufrr.br/1355928 curl -Ii http://w3.dmat.ufrr.br/.well-known/acme-challege/kfjsadfjsdljf HTTP/1.1 404 Not Found Server: nginx Date: Mon, 30 Jan 2023 21:15:27 GMT Content-Ty…

About Lets Debug answer... the server has a valid IPv4 (200.129.159.22) physically set up on the interface, not NAT or anything else. ifconfig em0: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=481009b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,VLAN_HWFILTER,N…

[image] jlgm: I guess the server is responding HTTP 404 correctly. But Lets Debug is still responding not ok. It might be working for you (from the same network perhaps?), but from (a large part of) the public internet your website seems to be down. Connecting to port 80 from my point of view…

nmap to find what is open $ nmap -Pn w3.dmat.ufrr.br Starting Nmap 7.80 ( https://nmap.org ) at 2023-01-30 21:35 UTC Nmap scan report for w3.dmat.ufrr.br (200.129.159.22) Host is up (0.21s latency). Not shown: 939 filtered ports, 59 closed ports PORT STATE SERVICE 80/tcp open http 443/tcp open…

Hi Osiris, Not at same network... at same city, yes.... and @Bruce5051 showed me the inconsistency of server access across the world via check-host.net . That's Ok. My first goal is correct the server as perfect as possible to not hold it responsible for any impediment to certificate renewal, i jus…

Is there a Palo Alto firewall between your server and the Internet?

Have renewed certificate fine for years but now i can't renew it

Help

Bruce5051 February 4, 2023, 8:18pm 28

Check here for DNS providers who easily integrate with Let's Encrypt DNS validation

Topic		Replies	Views
Certificate Renewal Help	67	2673	August 26, 2020
Certbot (auto)renew failed with apache server on IPV6 Help	33	3864	January 15, 2019
Challenges failed for renewal Help	26	3551	June 30, 2022
Certificate Renewal Failed Help	22	1867	September 23, 2021
Sudo certbot renew failed Help	30	1397	April 15, 2022

Have renewed certificate fine for years but now i can't renew it

Related topics