Hello Community, I need some help please.
- I configured letsencrypt for my kerio mail box using the guide here (I host this inhouse) https://herrbischoff.github.io/security/2016/02/02/Using-Lets-Encrypt-with-Kerio-Connect.html
- I had had three successful renewals however this morning when I try to run
/etc/init.d/kerio-connect stop
./certbot-auto renew
I get the following error:
Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator webroot, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for mail.health.go.ug
Waiting for verification…
Cleaning up challenges
Attempting to renew cert (mail.health.go.ug) from /etc/letsencrypt/renewal/mail.health.go.ug.conf produced an unexpected error: Failed authorization procedure. mail.health.go.ug (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://mail.health.go.ug/.well-known/acme-challenge/-NyfCJevDIJXCPC1PdFL6pAz27TA0yvvvZ7JqW4DPzg: Connection refused. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/mail.health.go.ug/fullchain.pem (failure)
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/mail.health.go.ug/fullchain.pem (failure)
1 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:
-
The following errors were reported by the server:
Domain: mail.health.go.ug
Type: connection
Detail: Fetching
http://mail.health.go.ug/.well-known/acme-challenge/-NyfCJevDIJXCPC1PdFL6pAz27TA0yvvvZ7JqW4DPzg:
Connection refusedTo fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address. Additionally, please check that
your computer has a publicly routable IP address and that no
firewalls are preventing the server from communicating with the
client. If you’re using the webroot plugin, you should also verify
that you are serving files from the webroot path you provided.
I will apprecaite some guidance to help sort it.