Renewal error - Error getting validation data

Help
1

May I please ask help from the community regarding the below issue during a dry run of the renewal process:-

My domain is: https://webchat.austnet.org:9090

I ran this command: certbot rewnew --dry-run

It produced this output:

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Processing /etc/letsencrypt/renewal/webchat.austnet.org.conf

Cert not due for renewal, but simulating renewal for dry run
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for webchat.austnet.org
Waiting for verification…
Cleaning up challenges
Attempting to renew cert (webchat.austnet.org) from /etc/letsencrypt/renewal/webchat.austnet.org.conf produced an unexpected error: Failed authorization procedure. webchat.austnet.org (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching https://webchat.austnet.org.well-known/acme-challenge/4BqeAuBbq5PdSqV5VXpXjbR9erOFKSzP14vSUS_YveQ: Error getting validation data. Skipping.
** DRY RUN: simulating ‘certbot renew’ close to cert expiry
** (The test certificates below have not been saved.)

All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/webchat.austnet.org/fullchain.pem (failure)
** DRY RUN: simulating ‘certbot renew’ close to cert expiry
** (The test certificates above have not been saved.)
1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: webchat.austnet.org
    Type: connection
    Detail: Fetching
    https://webchat.austnet.org.well-known/acme-challenge/4BqeAuBbq5PdSqV5VXpXjbR9erOFKSzP14vSUS_YveQ:
    Error getting validation data

    To fix these errors, please make sure that your domain name was
    entered correctly and the DNS A/AAAA record(s) for that domain
    contain(s) the right IP address. Additionally, please check that
    your computer has a publicly routable IP address and that no
    firewalls are preventing the server from communicating with the
    client. If you’re using the webroot plugin, you should also verify
    that you are serving files from the webroot path you provided.

My web server is (include version):

Server version: Apache/2.4.7 (Ubuntu)
Server built: Jul 27 2017 15:20:24

The operating system my web server runs on is (include version):

Distributor ID: Ubuntu
Description: Ubuntu 14.04.5 LTS
Release: 14.04
Codename: trusty

My hosting provider, if applicable, is: N/A

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No

More info:-

Here is the output of /etc/letsencrypt/renewal/webchat.austnet.org.conf:

#renew_before_expiry = 30 days
version = 0.17.0
archive_dir = /etc/letsencrypt/archive/webchat.austnet.org
cert = /etc/letsencrypt/live/webchat.austnet.org/cert.pem
privkey = /etc/letsencrypt/live/webchat.austnet.org/privkey.pem
chain = /etc/letsencrypt/live/webchat.austnet.org/chain.pem
fullchain = /etc/letsencrypt/live/webchat.austnet.org/fullchain.pem

#Options used in the renewal process
[renewalparams]
authenticator = webroot
installer = None
account = (not disclosed)
webroot_path = /var/www/austnet-org/webchat,
[[webroot_map]]
webchat.austnet.org = /var/www/austnet-org/webchat

Here is the output of /etc/apache2/sites-enabled/webchat-austnet-org.conf:

<VirtualHost *:80>
ServerName webchat.austnet.org
Redirect / https://webchat.austnet.org

<VirtualHost *:443>
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request’s Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.

    ServerName webchat.austnet.org

    ServerAdmin gremlinz@austnet.org
    DocumentRoot /var/www/austnet-org/webchat

    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/webchat.austnet.org/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/webchat.austnet.org/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/webchat.austnet.org/chain.pem

    # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
    # error, crit, alert, emerg.
    # It is also possible to configure the loglevel for particular
    # modules, e.g.
    #LogLevel info ssl:warn

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    # For most configuration files from conf-available/, which are
    # enabled or disabled at a global level, it is possible to
    # include a line for only one particular virtual host. For example the
    # following line enables the CGI configuration for this host only
    # after it has been globally disabled with "a2disconf".
    #Include conf-available/serve-cgi-bin.conf

#vim: syntax=apache ts=4 sw=4 sts=4 sr noet

If there is anything else I need to add for debugging this issue please let me know and many thanks in advance.

2

Hi @grem,

That Redirect is the problem, you need to add a trailing slash.

Redirect / https://webchat.austnet.org/

cheers,
sahsanu

1 Like
3

Hi sahsanu,

Your solution has solved the problem!

Thank you for your time.

Regards,

James

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.