Hi,
My cert expired Jun 6 and I had to upgrade my OS before I could update the certbot rpm. I followed instructions here about certbot >=28 and removing any reference to tls-sni-01, but still getting the same error message on renewal. Perhaps I have to do something different if it has expired?
I have been renewing the cert for years and haven’t changed anything. I don’t have a VirtualHost listening on port 80.
apachectl -t -D DUMP_VHOSTS
VirtualHost configuration:
*:443 quickening.zapto.org (/etc/httpd/conf.d/ssl.conf:56)
Perhaps the apache function is broken and I need alternative? “–webroot” didn’t work either.
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: quickening.zapto.org
I ran this command:certbot renew
It produceSaving debug log to /var/log/letsencrypt/letsencrypt.log
Processing /etc/letsencrypt/renewal/quickening.zapto.org.conf
Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for quickening.zapto.org
Cleaning up challenges
Attempting to renew cert (quickening.zapto.org) from /etc/letsencrypt/renewal/quickening.zapto.org.conf produced an unexpected error: Unable to find a virtual host listening on port 80 which is currently needed for Certbot to prove to the CA that you control your domain. Please add a virtual host for port 80… Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/quickening.zapto.org/fullchain.pem (failure)
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/quickening.zapto.org/fullchain.pem (failure)
1 renew failure(s), 0 parse failure(s)
d this output:
My web server is (include version):Apache 2.4.34
The operating system my web server runs on is (include version):fedoracore27
My hosting provider, if applicable, is:self
I can login to a root shell on my machine (yes or no, or I don’t know):yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):no
The version of my client is (e.g. output of certbot --version
or certbot-auto --version
if you’re using Certbot):certbot 0.31.0