Letsencrypt-auto not working any more

Help
4

@JuergenAuer's and @mnordhoff's comments are both completely correct.

The announcements of the changed behavior on this forum are at

and the underlying motivation is the TLS-SNI-01 end-of-life announcement that @JuergenAuer linked to (which would cause a more abrupt failure in mid-February if we didn't take steps to switch people over before then).

As @erica mentioned in the former post,

Between November and February (when the TLS-SNI-01 challenge type is deprecated at the server end ), users who have been relying on TLS-SNI-01 can use the flag --preferred-challenges tls-sni-01 as a temporary patch to get a certificate quickly, before correcting the configuration.

So you might want to do this now and then investigate DNS challenge options or a client that supports TLS-ALPN-01 before February 19.

2 Likes