Renew certificate error : The server could not connect to the client to verify the domain

Hi,
I tried to renew SSL Certificate and I got this message:

Attempting to renew cert (lujomark-babies.com) from /etc/letsencrypt/renewal/lujomark-babies.com.conf produced an unexpected error: Failed authorization procedure. lujomark-babies.com (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://lujomark-babies.com/.well-known/acme-challenge/iGQFr653nC-tPCL_-8eR-fDyNyWYwAy8vBjJOdrUCCs: Connection refused. Skipping. All renewal attempts failed. The following certs could not be renewed: /etc/letsencrypt/live/lujomark-babies.com/fullchain.pem (failure)

Does someone have any idea how to solve it ?

My domain is: lujomark-babies.com

I ran this command: certbot renew | certbot renew -q

It produced this output: UP

My web server is (include version): openLiteSpeed

The operating system my web server runs on is (include version): Ubuntu 18.04.4 LTS

My hosting provider, if applicable, is: Google Cloud Platform

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
Google Cloud VM instance

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.31.0

Thanks to helpers :]

1 Like

Hi @adirpion

see your error:

you need a working port 80 if you want to create a certificate via http validation. But your port 80 doesn't answer - https://check-your-website.server-daten.de/?q=lujomark-babies.com

Domainname Http-Status redirect Sec. G
http://lujomark-babies.com/ 34.68.170.59 -2 1.374 V
ConnectFailure - Unable to connect to the remote server
http://www.lujomark-babies.com/ 34.68.170.59 -2 1.360 V
ConnectFailure - Unable to connect to the remote server
https://www.lujomark-babies.com/ 34.68.170.59 301 https://lujomark-babies.com/ 4.040 N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
https://lujomark-babies.com/ 34.68.170.59 -14 13.233 T
Timeout - The operation has timed out
Certificate error: RemoteCertificateChainErrors
http://lujomark-babies.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 34.68.170.59 -2 1.364 V
ConnectFailure - Unable to connect to the remote server
Visible Content:
http://www.lujomark-babies.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 34.68.170.59 -2 1.360 V
ConnectFailure - Unable to connect to the remote server

Only your port 443 answers.

Open your port 80.

1 Like

Hi JuergenAuer,
First of all , thank you very much for your fast response.
I did what you told me and now I got this message:

Attempting to renew cert (lujomark-babies.com) from /etc/letsencrypt/renewal/lujomark-babies.com.conf produced an unexpected error: Failed authorization procedure. lujomark-babies.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://lujomark-babies.com/.well-known/acme-challenge/AFPWiKQpdHUvaLzQSJXuNsY9LWODcwfGUmJDQQYJ65M [34.68.170.59]: "<html>\n  <head>\n    <title>Page Not Found</title>\n  </head>\n<body bgcolor=\"#ffffff\">\n<hr>\n<h1>Request Page Not Found</h1>\nThis i". Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/lujomark-babies.com/fullchain.pem (failure)

Do you know how can I solve it ?
Thanks a lot!

1 Like

What's that? No Apache, no nginx.

What's the content of your config file? How did you create your older certificate?

Do that again. And don't use -q, that hides too much.

1 Like

What’s that? No Apache, no nginx.
openLiteSpeed is this:

What’s the content of your config file? How did you create your older certificate?
Some technology that purports to be extremely fast.
Here I used the docs to install the SSL certificate in the first time:
https://docs.litespeedtech.com/cloud/images/wordpress/#quick-start
But now I can’t use it agein because of the errors.

Do that again. And don’t use -q, that hides too much
I don’t use -q, I’m just typing certbot renew and I got the error message above.
I don’t know what all this happens.

There

is all you need. Your local litespeed looks incomplete, so validation doesn't work.

PS: There

23.8.2020, 20:29:51

is already a new certificate.

1 Like

Yesss!
I have succeeded to solve it.

Thank you very much my friend for helping me.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.