Server is unable to connect to the client

[wolfie]

I am trying to get my certs running on my server however the install fails out with the following

2015-12-07 13:47:26,222:INFO:letsencrypt.auth_handler:Waiting for verification…
2015-12-07 13:47:26,232:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 13:47:29,547:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 13:47:29,913:INFO:letsencrypt.reporter:Reporting to user: The following ‘urn:acme:error:connection’ errors were reported by the server:

Domains: mail.hastingstechs.com
Error: The server could not connect to the client for DV
2015-12-07 13:47:29,913:INFO:letsencrypt.auth_handler:Cleaning up challenges
Failed authorization procedure. mail.hastingstechs.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client for DV :: Failed to connect to host for DVSNI challenge

IMPORTANT NOTES:

• The following ‘urn:acme:error:connection’ errors were reported by
  the server:

  Domains: mail.hastingstechs.com
  Error: The server could not connect to the client for DV

I am able to ping the server but am unable to find anything that details what is going wrong.

Any assistance is appreciated.

[pfg]

Please run the client in verbose mode (-v) and provide:

1. The exact command (including all arguments or options you selected in interactive mode) you used
2. the full command output
3. any log files in /var/log/letsencrypt/

[sixberk]

same problem debian jessie

[sixberk]

2015-12-07 19:28:22,288:DEBUG:letsencrypt.cli:Root logging level set at 30
2015-12-07 19:28:22,289:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2015-12-07 19:28:22,290:DEBUG:letsencrypt.cli:letsencrypt version: 0.1.0
2015-12-07 19:28:22,290:DEBUG:letsencrypt.cli:Arguments: [’-webroot’, ‘-w’, ‘/home/www.domain.com/’, ‘–apache’]
2015-12-07 19:28:22,292:DEBUG:letsencrypt.cli:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2015-12-07 19:28:22,297:DEBUG:letsencrypt.cli:Requested authenticator apache and installer apache
2015-12-07 19:28:22,615:DEBUG:letsencrypt.display.ops:Single candidate plugin: * apache
Description: Apache Web Server - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = letsencrypt_apache.configurator:ApacheConfigurator
Initialized: <letsencrypt_apache.configurator.ApacheConfigurator object at 0x7f5df3f1e890>
Prep: True
2015-12-07 19:28:22,616:DEBUG:letsencrypt.cli:Selected authenticator <letsencrypt_apache.configurator.ApacheConfigurator object at 0x7f5df3f1e890> and installer <letsencrypt_apache.configurator.ApacheConfigurator object at 0x7f5df3f1e890>
2015-12-07 19:28:37,243:DEBUG:letsencrypt.cli:Picked account: <Account(3d922718fea6b7311a7da1e8e8ad1ec1)>
2015-12-07 19:28:37,244:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
2015-12-07 19:28:37,248:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 19:28:37,642:DEBUG:requests.packages.urllib3.connectionpool:“GET /directory HTTP/1.1” 200 263
2015-12-07 19:28:37,645:DEBUG:root:Received <Response [200]>. Headers: {‘Content-Length’: ‘263’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:37 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:37 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘h5Hv54h_sd3fIhJYS_3nQNS73v0KRiu4aZMGXnHsxMA’}. Content: '{“new-authz”:“https://acme-v01.api.letsencrypt.org/acme/new-authz",“new-cert”:“https://acme-v01.api.letsencrypt.org/acme/new-cert”,“new-reg”:“https://acme-v01.api.letsencrypt.org/acme/new-reg”,“revoke-cert”:"https://acme-v01.api.letsencrypt.org/acme/revoke-cert”}'
2015-12-07 19:28:37,646:DEBUG:acme.client:Received response <Response [200]> (headers: {‘Content-Length’: ‘263’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:37 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:37 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘h5Hv54h_sd3fIhJYS_3nQNS73v0KRiu4aZMGXnHsxMA’}): ‘{“new-authz”:“https://acme-v01.api.letsencrypt.org/acme/new-authz",“new-cert”:“https://acme-v01.api.letsencrypt.org/acme/new-cert”,“new-reg”:“https://acme-v01.api.letsencrypt.org/acme/new-reg”,“revoke-cert”:"https://acme-v01.api.letsencrypt.org/acme/revoke-cert”}‘
2015-12-07 19:28:37,820:INFO:letsencrypt.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0003_key-letsencrypt.pem
2015-12-07 19:28:37,823:INFO:letsencrypt.crypto_util:Creating CSR: /etc/letsencrypt/csr/0003_csr-letsencrypt.pem
2015-12-07 19:28:37,824:DEBUG:letsencrypt.client:CSR: CSR(file=’/etc/letsencrypt/csr/0003_csr-letsencrypt.pem’, data=‘0\x82\x02\x8c0\x82\x01t\x02\x01\x000\x1a1\x180\x16\x06\x03U\x04\x03\x0c\x0fprojekt.domain.com\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc7\xa6\xa2\xe73H\x80r\xba\xd3\xbcU\x95Z\x82\xd0CuA\xcb\x96x\x7f\xd6\x9f\xe8\xc0\x8fp\x18\x1f\x8e\x84\x8f\xe8L\xd7\xc8\xa1/\xfe\x87\xef\x01\x13\xb8\x15\x82\xc1\xa2\xb0\xc4U\x98\xfa\tC\x03\x7fa\xb0\x01\x84\xa0\xfd\xd3\xc40\xa2<\tj-\xcf\x1e\x88r\xc4\xf2\x11i\x9c\xdf\x18\x9d\xab\x07\xab\x10=\x1cp\x8bZU\x94Hl\xe4\x83\x94\x81\xcdy9\xd9\'#\x96^[c\xffkh\xc6?\xb5=U\x86:\xe5\xb5fs\xb6\x17\x0e\xebs\xe0\x17\x9b\xf0\x8a%hR\xf3\xc1\xcf[~\x9caM>{\x8b\x84;\xe9\x90\x03\xddF\xba\x8f\xd1>&~u\x83\x90\x0fn[oi\xee\xe12P,\xdb\xe5\x96\xe0\xf8\xe0F\xb7\xb4\xba?\xb1\x86\xe5\xec\xad(1\x1f\x17\xca\xac\xe1\xd3g\xcaN(9\x9f\x9e\xac\xc1\xae\x8e\xa4\xaf\xc3\x00\xc0w\xce\xd8l6?yV@\xadC\xcf|\xc6!<1\x01\x9cx\xe2\xfd\xc4I\tL\xa1\xa1\xd1\xa6\xd0\xa4\xdbD\xaf\xf0\xc6m\x02\x03\x01\x00\x01\xa0-0+\x06\t*\x86H\x86\xf7\r\x01\t\x0e1\x1e0\x1c0\x1a\x06\x03U\x1d\x11\x04\x130\x11\x82\x0fprojekt.domain.com0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00{nz\x1c\x04\xee\x05\xf4\xa5j\x0e\xf6\x15\x93\xd4u\xa9&m\xdf\x8e\x81\r\x04\xfb\x04\xfal\xe4N\x10<b8I\xa12-\xeb\xd8\xd7\xe4)\xd94>\x05\xf5u\xf6\x16\xd1\xfe\xeeN\xab\xca\x18\xd1\xa3\x1e*\'\xcb\xd8\x9c\x85H\x99\xe9@\xe8\xfe\xf1eIv:n\x98\xad\xe9G\x9bU\x85"q\xaf\x12\\b\x15\x96\xfds\xbe\x89\xc9\x97\x88\xf3j\x9d)\x04y\xb4\x0f%\x1bf\xd6wd\x9f\x16\xb402\xc1A\xb1\xb70\x8c\x86\xef\xe7\xe7\x0f\x87q\xb17Rh\nm\x13\x08Mdf\xee\xdb<\xcd\x82R\x95\xa7\xa1\x96&\x9f\x11Q G{C:\x8e\xe6]6\x98\x91\xeeJD\xf5\xdf\xd7’$\xf7\xfe\x14\x85\xc2\x05\x982wk,\xc4\xaa7M\xe5~\x95\x86y>Pv)\x8aU\xe5n\x935\xfeA\xf2\x94\t\xdc4\xa3y\x1aB\xc3\xe8\xd7\x1b\x00\xdb\xfc\xf0\xef7\xbb\x91\xb0\x1e\xe1\xc5\xc1P\xf9z \xc4\xe7\xe2:\x88\x14<lY="\x85\xa0\\', form='der'), domains: ['projekt.domain.com'] 2015-12-07 19:28:37,824:DEBUG:root:Requesting fresh nonce 2015-12-07 19:28:37,824:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {} 2015-12-07 19:28:37,825:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org 2015-12-07 19:28:38,114:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0 2015-12-07 19:28:38,117:DEBUG:root:Received <Response [405]>. Headers: {'Content-Length': '0', 'Pragma': 'no-cache', 'Expires': 'Mon, 07 Dec 2015 19:28:37 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Allow': 'POST', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 07 Dec 2015 19:28:37 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': 'gykChVayiJbm_CqOodFoMalPxPxY3iumugkhYpU1j-U'}. Content: '' 2015-12-07 19:28:38,118:DEBUG:acme.client:Storing nonce: '\x83)\x02\x85V\xb2\x88\x96\xe6\xfc*\x8e\xa1\xd1h1\xa9O\xc4\xfcX\xde+\xa6\xba\t!b\x955\x8f\xe5' 2015-12-07 19:28:38,118:DEBUG:acme.jose.json_util:Omitted empty fields: status=None, combinations=None, expires=None, challenges=None 2015-12-07 19:28:38,119:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "projekt.domain.com"}, "resource": "new-authz"} 2015-12-07 19:28:38,121:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, alg=None, jku=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None, jwk=None 2015-12-07 19:28:38,123:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, jku=None, nonce=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None 2015-12-07 19:28:38,124:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "0q8k1C3kWxqQ6ymwEkTFl9yfkSvLZOROF9Eh4JydiO3rpXJI2OlBaBPOqVnvB22aGRJEoIkppBiO219zQULa_I7jeIYA0cLk8yccvvJDDIXH_treELA3e39ZhHieKZJhKdAc0hmUK1w0bkvZwxBnvI26Wkbps7XyRMHxNMwZdbQLBKuetHB971G2iDybVXSPe41Ran-tckBfQ2ynjliv-mpv5oHNMltqjGonAM5hnmpxZLEeAYm75tK9q2wm_2CqaFoDOffeGQBlOLn0cASwDH1tIO3BpykvaCUqjNKJlUAGZuQtPypGUGztWtEzEyyp3AbOUmR9KnE2-5g81yOaJw"}}, "protected": "eyJub25jZSI6ICJneWtDaFZheWlKYm1fQ3FPb2RGb01hbFB4UHhZM2l1bXVna2hZcFUxai1VIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJwcm9qZWt0LnZza2UuY3oifSwgInJlc291cmNlIjogIm5ldy1hdXRoeiJ9", "signature": "zjzCMCurQmwt1jMiPzRZU4rMygcpsuBDJ9OfK4Tdl2ozrW5KszwpspTklToAjgOyjzR7P4uiyZ75RXFz3p12zrQSmIjdTNlNqWlawzJ4ZEA8janjW8fWY-oY-GSpsBKMofc7KCWuT7abOGgcZDTIXFNuV_x1iXhV2hVkXZS0WAGLp_WCS4udEJwpaullvQ7ceB_tKjKf-v1XQsx-DPXqwsp597cENWM38gIa37S71WM5IaHTMevp5by7gw5Qgvgwed9bHTnDQ2VIGWoCc9_QcORGIse8jhga-SB4st40GNJAM5MuVhoJ6TgyvbJrks1lwwwbgZyaRT2wdQA3YmFa8w"}'} 2015-12-07 19:28:38,124:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org 2015-12-07 19:28:38,467:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 568 2015-12-07 19:28:38,470:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '568', 'Expires': 'Mon, 07 Dec 2015 19:28:38 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 07 Dec 2015 19:28:38 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'qe0z6YrCFhoW5sdiXHO9D-lgfYOu-_nAKU79css9-jc'}. Content: '{"identifier":{"type":"dns","value":"projekt.domain.com"},"status":"pending","expires":"2015-12-14T19:28:38.144730933Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599","token":"xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600","token":"3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY"}],"combinations":[[0],[1]]}' 2015-12-07 19:28:38,471:DEBUG:acme.client:Storing nonce: '\xa9\xed3\xe9\x8a\xc2\x16\x1a\x16\xe6\xc7b\\s\xbd\x0f\xe9}\x83\xae\xfb\xf9\xc0)N\xfdr\xcb=\xfa7’
2015-12-07 19:28:38,472:DEBUG:acme.client:Received response <Response [201]> (headers: {‘Content-Length’: ‘568’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:38 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:38 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘qe0z6YrCFhoW5sdiXHO9D-lgfYOu-nAKU79css9-jc’}): '{“identifier”:{“type”:“dns”,“value”:“projekt.domain.com”},“status”:“pending”,“expires”:“2015-12-14T19:28:38.144730933Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations”:[[0],[1]]}'
2015-12-07 19:28:38,473:INFO:letsencrypt.auth_handler:Performing the following challenges:
2015-12-07 19:28:38,473:INFO:letsencrypt.auth_handler:tls-sni-01 challenge for projekt.domain.com
2015-12-07 19:28:38,532:DEBUG:letsencrypt_apache.configurator:Enabled dependency of ssl module - socache_shmcb
2015-12-07 19:28:38,590:INFO:letsencrypt_apache.configurator:Enabled Apache ssl module
2015-12-07 19:28:38,718:DEBUG:letsencrypt_apache.configurator:No Listen 443 directive found. Setting the Apache Server to Listen on port 443
2015-12-07 19:28:39,032:DEBUG:letsencrypt.reverter:Creating backup of /etc/apache2/ports.conf
2015-12-07 19:28:39,034:DEBUG:letsencrypt.reverter:Creating backup of /etc/apache2/apache2.conf
2015-12-07 19:28:42,255:INFO:letsencrypt.auth_handler:Waiting for verification…
2015-12-07 19:28:42,256:DEBUG:acme.client:Serialized JSON: {“keyAuthorization”: “xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4”, “type”: “tls-sni-01”, “resource”: “challenge”}
2015-12-07 19:28:42,259:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, alg=None, jku=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None, jwk=None
2015-12-07 19:28:42,265:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, jku=None, nonce=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None
2015-12-07 19:28:42,266:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599. args: (), kwargs: {‘data’: '{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “0q8k1C3kWxqQ6ymwEkTFl9yfkSvLZOROF9Eh4JydiO3rpXJI2OlBaBPOqVnvB22aGRJEoIkppBiO219zQULa_I7jeIYA0cLk8yccvvJDDIXH_treELA3e39ZhHieKZJhKdAc0hmUK1w0bkvZwxBnvI26Wkbps7XyRMHxNMwZdbQLBKuetHB971G2iDybVXSPe41Ran-tckBfQ2ynjliv-mpv5oHNMltqjGonAM5hnmpxZLEeAYm75tK9q2wm_2CqaFoDOffeGQBlOLn0cASwDH1tIO3BpykvaCUqjNKJlUAGZuQtPypGUGztWtEzEyyp3AbOUmR9KnE2-5g81yOaJw”}}, “protected”: “eyJub25jZSI6ICJxZTB6NllyQ0Zob1c1c2RpWEhPOUQtbGdmWU91LV9uQUtVNzljc3M5LWpjIn0”, “payload”: “eyJrZXlBdXRob3JpemF0aW9uIjogInhSZmdobTlSa09TRFN6ZDRBVE1DRTFQamVtSEw3MWFSV0lmTjBPT01MOTgub1c4eUpHLVB5anJ5dko5Vjg1SlNnR3luX0xDaGJvMlBvczNmX2FlMlV1NCIsICJ0eXBlIjogInRscy1zbmktMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0”, “signature”: "iYZMofnTNY9A2-vp83xTNyy1R-eF3dIY2GLsNpg478Z-vqGVLcV8pL-9AkqIf4m0Yr7H1FzNJWG-NMaQvPuZ2NRm9ko97zxUtFrEMTTSQfUkfTSztCAe1Zt8oSSY_0DCnNjRcBd0isahUq2U0z1mk4q2BzdLasPREKJfYv–XqlroCunm0rH502qnzQ-D_bDGkRhyFt3SKoF89wyR5bM3-sySd9ZkUfoKkiFlpt6h_UYIObALSIFBnOz978zPAotS0_q4VqsXlM31Y2T7dlKh0y6zXWafdGlcgz0XSHz-2QO1eZaPqfuegGvc0ZCjAKUGyzLsdf10r4TCCiSulB7w"}’}
2015-12-07 19:28:42,268:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 19:28:42,595:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599 HTTP/1.1” 202 315
2015-12-07 19:28:42,598:DEBUG:root:Received <Response [202]>. Headers: {‘Content-Length’: ‘315’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:42 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk;rel=“up”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:42 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘ovZLX3AA5IbqoQhXdfTuMpoGyTnWdhMmgjae44z3loA’}. Content: '{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:"xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4”}'
2015-12-07 19:28:42,599:DEBUG:acme.client:Storing nonce: '\xa2\xf6K_p\x00\xe4\x86\xea\xa1\x08Wu\xf4\xee2\x9a\x06\xc99\xd6v\x13&\x826\x9e\xe3\x8c\xf7\x96\x80’
2015-12-07 19:28:42,600:DEBUG:acme.client:Received response <Response [202]> (headers: {‘Content-Length’: ‘315’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:42 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk;rel=“up”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:42 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘ovZLX3AA5IbqoQhXdfTuMpoGyTnWdhMmgjae44z3loA’}): '{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:"xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4”}'
2015-12-07 19:28:45,603:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk. args: (), kwargs: {}
2015-12-07 19:28:45,605:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 19:28:45,891:DEBUG:requests.packages.urllib3.connectionpool:“GET /acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk HTTP/1.1” 200 667
2015-12-07 19:28:45,892:DEBUG:root:Received <Response [200]>. Headers: {‘Content-Length’: ‘667’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:45 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:45 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘oRKVWnx249desaPxpkulggUo9tjA8FDq3Ua4pwISz64’}. Content: '{“identifier”:{“type”:“dns”,“value”:“projekt.domain.com”},“status”:“pending”,“expires”:“2015-12-14T19:28:38Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4”},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations”:[[0],[1]]}'
2015-12-07 19:28:45,894:DEBUG:acme.client:Received response <Response [200]> (headers: {‘Content-Length’: ‘667’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:45 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:45 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘oRKVWnx249desaPxpkulggUo9tjA8FDq3Ua4pwISz64’}): '{“identifier”:{“type”:“dns”,“value”:“projekt.domain.com”},“status”:“pending”,“expires”:“2015-12-14T19:28:38Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4”},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations”:[[0],[1]]}'
2015-12-07 19:28:48,898:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk. args: (), kwargs: {}
2015-12-07 19:28:48,900:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 19:28:49,169:DEBUG:requests.packages.urllib3.connectionpool:“GET /acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk HTTP/1.1” 200 902
2015-12-07 19:28:49,172:DEBUG:root:Received <Response [200]>. Headers: {‘Content-Length’: ‘902’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:48 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:48 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘Eudd4iTbyyRbM2GQnD2vOZ7u6z8XwgWBuZIdvEUomNA’}. Content: '{“identifier”:{“type”:“dns”,“value”:“projekt.domain.com”},“status”:“invalid”,“expires”:“2015-12-14T19:28:38Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“invalid”,“error”:{“type”:“urn:acme:error:connection”,“detail”:“Failed to connect to host for DVSNI challenge”},“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4”,“validationRecord”:[{“hostname”:“projekt.domain.com”,“port”:“443”,“addressesResolved”:[“95.129.96.133”],“addressUsed”:“95.129.96.133”}]},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations”:[[0],[1]]}'
2015-12-07 19:28:49,173:DEBUG:acme.client:Received response <Response [200]> (headers: {‘Content-Length’: ‘902’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:48 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:48 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘Eudd4iTbyyRbM2GQnD2vOZ7u6z8XwgWBuZIdvEUomNA’}): '{“identifier”:{“type”:“dns”,“value”:“projekt.domain.com”},“status”:“invalid”,“expires”:“2015-12-14T19:28:38Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“invalid”,“error”:{“type”:“urn:acme:error:connection”,“detail”:“Failed to connect to host for DVSNI challenge”},“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4”,“validationRecord”:[{“hostname”:“projekt.domain.com”,“port”:“443”,“addressesResolved”:[“95.129.96.133”],“addressUsed”:“95.129.96.133”}]},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations”:[[0],[1]]}'
2015-12-07 19:28:49,174:INFO:letsencrypt.reporter:Reporting to user: The following ‘urn:acme:error:connection’ errors were reported by the server:

Domains: projekt.domain.com
Error: The server could not connect to the client for DV
2015-12-07 19:28:49,175:INFO:letsencrypt.auth_handler:Cleaning up challenges
2015-12-07 19:28:49,496:DEBUG:letsencrypt.cli:Exiting abnormally:
Traceback (most recent call last):
File “/root/.local/share/letsencrypt/bin/letsencrypt”, line 11, in
sys.exit(main())
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 1283, in main
return args.func(args, config, plugins)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 470, in run
lineage = _auth_from_domains(le_client, config, domains)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 336, in _auth_from_domains
lineage = le_client.obtain_and_enroll_certificate(domains)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 283, in obtain_and_enroll_certificate
certr, chain, key, _ = self.obtain_certificate(domains)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 266, in obtain_certificate
return self._obtain_certificate(domains, csr) + (key, csr)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 224, in _obtain_certificate
authzr = self.auth_handler.get_authorizations(domains)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth_handler.py”, line 84, in get_authorizations
self._respond(cont_resp, dv_resp, best_effort)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth_handler.py”, line 142, in _respond
self._poll_challenges(chall_update, best_effort)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth_handler.py”, line 204, in _poll_challenges
raise errors.FailedChallenges(all_failed_achalls)
FailedChallenges: Failed authorization procedure. projekt.domain.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client for DV :: Failed to connect to host for DVSNI challenge

[wolfie]

The command run is:
./letsencrypt-auto --server https://acme-v01.api.letsencrypt.org/directory auth --text -v

Program output:

Updating letsencrypt and virtual environment dependencies…
Requirement already up-to-date: setuptools in /root/.local/share/letsencrypt/lib/python2.7/site-packages
Requirement already up-to-date: pip in /root/.local/share/letsencrypt/lib/python2.7/site-packages
Requirement already up-to-date: letsencrypt in /root/.local/share/letsencrypt/lib/python2.7/site-packages
Requirement already up-to-date: letsencrypt-apache in /root/.local/share/letsencrypt/lib/python2.7/site-packages
Requirement already up-to-date: acme==0.1.0 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: setuptools in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: python2-pythondialog>=3.2.2rc1 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: PyOpenSSL in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: requests in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: parsedatetime in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: configobj in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: pytz in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: psutil>=2.1.0 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: six in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: cryptography>=0.7 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: zope.interface in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: zope.component in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: mock in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: ConfigArgParse in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: pyrfc3339 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt)
Requirement already up-to-date: python-augeas in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt-apache)
Requirement already up-to-date: pyasn1 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from acme==0.1.0->letsencrypt)
Requirement already up-to-date: ndg-httpsclient in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from acme==0.1.0->letsencrypt)
Requirement already up-to-date: werkzeug in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from acme==0.1.0->letsencrypt)
Requirement already up-to-date: idna>=2.0 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cryptography>=0.7->letsencrypt)
Requirement already up-to-date: enum34 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cryptography>=0.7->letsencrypt)
Requirement already up-to-date: ipaddress in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cryptography>=0.7->letsencrypt)
Requirement already up-to-date: cffi>=1.1.0 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cryptography>=0.7->letsencrypt)
Requirement already up-to-date: zope.event in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from zope.component->letsencrypt)
Requirement already up-to-date: funcsigs in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from mock->letsencrypt)
Requirement already up-to-date: pbr>=0.11 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from mock->letsencrypt)
Requirement already up-to-date: pycparser in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cffi>=1.1.0->cryptography>=0.7->letsencrypt)
Running with virtualenv: /root/.local/share/letsencrypt/bin/letsencrypt --server https://acme-v01.api.letsencrypt.org/directory auth --text -v
2015-12-07 14:36:25,879:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log

How would you like to authenticate with the Let’s Encrypt CA?

1: Apache Web Server - Alpha (apache)
2: Automatically use a temporary webserver (standalone)

Select the appropriate number [1-2] then [enter] (press ‘c’ to cancel): 1
2015-12-07 14:36:31,012:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
Please enter in your domain name(s) (comma and/or space separated) (Enter 'c’
to cancel):mail.hastingstechs.com
2015-12-07 14:36:44,068:INFO:letsencrypt.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0007_key-letsencrypt.pem
2015-12-07 14:36:44,080:INFO:letsencrypt.crypto_util:Creating CSR: /etc/letsencrypt/csr/0007_csr-letsencrypt.pem
2015-12-07 14:36:44,082:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 14:36:44,368:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 14:36:44,715:INFO:letsencrypt.auth_handler:Performing the following challenges:
2015-12-07 14:36:44,716:INFO:letsencrypt.auth_handler:tls-sni-01 challenge for mail.hastingstechs.com

We were unable to find a vhost with a ServerName or Address of mail.hastingstechs.com.
Which virtual host would you like to choose?

1: default-ssl.conf | | HTTPS |
2: default-ssl.conf.old | | HTTPS |
3: 000-default.conf | | | Enabled
4: 000-default-le-ssl.conf | | HTTPS | Enabled

Select the appropriate number [1-4] then [enter] (press ‘c’ to cancel): 1
2015-12-07 14:36:51,398:INFO:letsencrypt.auth_handler:Waiting for verification…
2015-12-07 14:36:51,407:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 14:36:54,775:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2015-12-07 14:36:55,233:INFO:letsencrypt.reporter:Reporting to user: The following ‘urn:acme:error:connection’ errors were reported by the server:

Domains: mail.hastingstechs.com
Error: The server could not connect to the client for DV
2015-12-07 14:36:55,234:INFO:letsencrypt.auth_handler:Cleaning up challenges
Failed authorization procedure. mail.hastingstechs.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client for DV :: Failed to connect to host for DVSNI challenge

IMPORTANT NOTES:

• The following ‘urn:acme:error:connection’ errors were reported by
  the server:

  Domains: mail.hastingstechs.com
  Error: The server could not connect to the client for DV

Error Logs:

2015-12-07 19:36:25,879:DEBUG:letsencrypt.cli:Root logging level set at 20
2015-12-07 19:36:25,879:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2015-12-07 19:36:25,879:DEBUG:letsencrypt.cli:letsencrypt version: 0.1.0
2015-12-07 19:36:25,879:DEBUG:letsencrypt.cli:Arguments: [’–server’, ‘https://acme-v01.api.letsencrypt.org/directory’, ‘–text’, ‘-v’]
2015-12-07 19:36:25,879:DEBUG:letsencrypt.cli:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2015-12-07 19:36:25,880:DEBUG:letsencrypt.cli:Requested authenticator None and installer None
2015-12-07 19:36:27,085:DEBUG:letsencrypt.plugins.disco:Other error:(PluginEntryPoint#webroot): --webroot-path must be set
Traceback (most recent call last):
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/plugins/disco.py”, line 103, in prepare
self._initialized.prepare()
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/plugins/webroot.py”, line 54, in prepare
self.option_name(“path”)))
PluginError: --webroot-path must be set
2015-12-07 19:36:27,089:DEBUG:letsencrypt.display.ops:Multiple candidate plugins: * apache
Description: Apache Web Server - Alpha
Interfaces: IAuthenticator, IInstaller, IPlugin
Entry point: apache = letsencrypt_apache.configurator:ApacheConfigurator
Initialized: <letsencrypt_apache.configurator.ApacheConfigurator object at 0x7f2f2b921c90>
Prep: True

• standalone
  Description: Automatically use a temporary webserver
  Interfaces: IAuthenticator, IPlugin
  Entry point: standalone = letsencrypt.plugins.standalone:Authenticator
  Initialized: <letsencrypt.plugins.standalone.Authenticator object at 0x7f2f2b921590>
  Prep: True
  2015-12-07 19:36:30,951:DEBUG:letsencrypt.cli:Selected authenticator <letsencrypt_apache.configurator.ApacheConfigurator object at 0x7f2f2b921c90> and installer None
  2015-12-07 19:36:30,988:DEBUG:letsencrypt.cli:Picked account: <Account(7c314f1e3b956b3c5d50c5ca028668bc)>
  2015-12-07 19:36:31,008:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
  2015-12-07 19:36:31,012:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  2015-12-07 19:36:31,492:DEBUG:requests.packages.urllib3.connectionpool:“GET /directory HTTP/1.1” 200 263
  2015-12-07 19:36:31,494:DEBUG:root:Received <Response [200]>. Headers: {‘Content-Length’: ‘263’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:31 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:31 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘RdysFjRAqa-5K9dF51gvkM6mtA0bRLk9HOP4D7sVrpI’}. Content: '{“new-authz”:“https://acme-v01.api.letsencrypt.org/acme/new-authz",“new-cert”:“https://acme-v01.api.letsencrypt.org/acme/new-cert”,“new-reg”:“https://acme-v01.api.letsencrypt.org/acme/new-reg”,“revoke-cert”:"https://acme-v01.api.letsencrypt.org/acme/revoke-cert”}'
  2015-12-07 19:36:31,495:DEBUG:acme.client:Received response <Response [200]> (headers: {‘Content-Length’: ‘263’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:31 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:31 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘RdysFjRAqa-5K9dF51gvkM6mtA0bRLk9HOP4D7sVrpI’}): ‘{“new-authz”:“https://acme-v01.api.letsencrypt.org/acme/new-authz",“new-cert”:“https://acme-v01.api.letsencrypt.org/acme/new-cert”,“new-reg”:“https://acme-v01.api.letsencrypt.org/acme/new-reg”,“revoke-cert”:"https://acme-v01.api.letsencrypt.org/acme/revoke-cert”}‘
  2015-12-07 19:36:31,495:DEBUG:letsencrypt.display.ops:No installer, picking names manually
  2015-12-07 19:36:44,068:INFO:letsencrypt.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0007_key-letsencrypt.pem
  2015-12-07 19:36:44,080:INFO:letsencrypt.crypto_util:Creating CSR: /etc/letsencrypt/csr/0007_csr-letsencrypt.pem
  2015-12-07 19:36:44,080:DEBUG:letsencrypt.client:CSR: CSR(file=’/etc/letsencrypt/csr/0007_csr-letsencrypt.pem’, data='0\x82\x02\x9a0\x82\x01\x82\x02\x01\x000!1\x1f0\x1d\x06\x03U\x04\x03\x0c\x16mail.hastingstechs.com0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc0qX\x96\x07x\xcd\xec\ng\xaa\xf1\xd1\x91^\x01\xf8\x9a$\x94!OK\xba\x06\xa7\xcb)b/\xcf\xf8\x9b1\xe4\xbe\xddCj\xef\xca\xea\xd1\x1cgmY\xc13\x9b\xb8\xd2\xcdAK\x06\xc0\x8d4\xc9\xa8\xa4\xe3\xe9\xc8\xbc\x1a\xf3\x1b\x17\xe0\x04H6\xaaV\x9b\xe7\xc4f\x1e\xf5\xb8\xea\xe1\xdbR\x85\x87\x1dIu\xa3\x83=un\xe4\x88\xc0&\xc3\x86-E\x14[\x1f\xaf\xbb3a<\x9c?\x94\x85\xb8\xd3\xeak\xd4V\xf9\xab\x1b\x07zhx\xbf\xce\x9b\x19’;s\x04\x1c7T\x14l\x87\xde\x06Q0\x9b\xfa\xa8\xe6\xe4\x89\x87n\x9d@\xf0Kq\xc2V\xffX\x1b_\xd4\xf0\x81$\x86\xb5\x1dro\x0c\xb8q^\xe0\xd0v\x82+L\xd7\xdb\xbe\xe0\xd5f\rF\x8bX\x18^\x0ft\xa5\x94\xa4\x81\xceF%\xa6\xd6\xf6\x1d\x033\x1b)$\x9c\x86\xa4\xd1\xea\x01\xe9\xe1\xc9\xb27\xd2\xfd\x05\x84\x96\xd0E:\xc6Q|{\xb2\xfb\x08Js\x89N6\\T\x17:0\xe3\x91\x02\x03\x01\x00\x01\xa0402\x06\t*\x86H\x86\xf7\r\x01\t\x0e1%0#0!\x06\x03U\x1d\x11\x04\x1a0\x18\x82\x16mail.hastingstechs.com0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00\xa4WO\xc0\xa4\x1es$FOA\xca\xad\x14\xe4\xa6J\xb7\xdd\xd0},\xae\x99\xbc\n\x85\xe3lQi\xaa\xc3\x97\x0c\xb4w<\xc8l\xe7G\xfb\x1e\x06[Q\x02\xdd\xcb\xf2\x11\x15&\xc1\xb5\xdd\x00\x04\xef\xb8\xa9\x18\xf90\xaa\xebaN\x8a\x92\x94\xa6\xf2\x07\xd3\xb3K\x84\xacwsI\x0b\xe0\x14\x03\xfeJ\x9dN\x97(!\xeatV8\xfa8\xe7*\xde_\x03\x8c\xcc\xd6s\xe4g\xa8\x92l\xc5\xaa\x12\xfc\xc8\x08\xb1/\x91\x9fb\x90F\xd1\xaeI\xca\xa0^2\x0f\x02|m\xb0\x06\xe6\xe5@\xbc\xad\xa2%\xa2\xad\xf3\x91\xd3\xdaC5\xbc\xf0\xfcI:1k\xa9sK\xe9\x99~h\xd9\xb8\x91F\'\xc5\xeb#J\xc7\x1f|\xaaW\xc1/6\xf9\xc3\xa8&o\r\xca\x838\xde\xc0\x9d\x95\xc3\xed\x1c\xab\r85\xaey~%\x8b-\xc1\xca\x19c3\x97o*&\x8c\x88\x04|\xf5\xb8_\x15&eK\xf0\x17\x92\xd1\xa6\x02\n\xed\xf4\xe0\xe2\xc2y\xaaW\x11\x10\x10g4\xf3', form='der'), domains: ['mail.hastingstechs.com'] 2015-12-07 19:36:44,081:DEBUG:root:Requesting fresh nonce 2015-12-07 19:36:44,081:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {} 2015-12-07 19:36:44,082:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org 2015-12-07 19:36:44,350:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0 2015-12-07 19:36:44,352:DEBUG:root:Received <Response [405]>. Headers: {'Content-Length': '0', 'Pragma': 'no-cache', 'Expires': 'Mon, 07 Dec 2015 19:36:44 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Allow': 'POST', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 07 Dec 2015 19:36:44 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': 'enrlqI5WAaVzYl4v6PMeZyVnHGD1gluniJvU4soHEmw'}. Content: '' 2015-12-07 19:36:44,352:DEBUG:acme.client:Storing nonce: 'zz\xe5\xa8\x8eV\x01\xa5sb^/\xe8\xf3\x1eg%g\x1c\xf5\x82[\xa7\x88\x9b\xd4\xe2\xca\x07\x12l’
  2015-12-07 19:36:44,352:DEBUG:acme.jose.json_util:Omitted empty fields: expires=None, challenges=None, status=None, combinations=None
  2015-12-07 19:36:44,353:DEBUG:acme.client:Serialized JSON: {“identifier”: {“type”: “dns”, “value”: “mail.hastingstechs.com”}, “resource”: “new-authz”}
  2015-12-07 19:36:44,354:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
  2015-12-07 19:36:44,361:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
  2015-12-07 19:36:44,361:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “6tVt4OfPhc33n-UT54HV_M7AWtI09gh2eFzWcS6rwLHMVG-LVjsQuPSX47OE34AaXGsKJIRAVQdSAeRDPX9ti3yGi-9eq_vtfEvUty4sLJHbxwywCzWyXT0ztjegAzxfeScndleqn9b6QSIFMGU7nwxY9oIw5oYNIPyHkBhwDfkSTlv_G88LEYWuvcjD3mGfLmiZ4qvXF44w0KKSA7MxUk4yUwWOt6El0oUC55eRtBIiR-3S1f_uaU7eaJBjomYEB0ArC04TIX6Ynt8-1FTgJjtATlaVUuXNpuPZDuXR3pFQh50lolnwCq2eM7Q8BRjj7uBwK2paCs4agKG102lhZw”}}, “protected”: “eyJub25jZSI6ICJlbnJscUk1V0FhVnpZbDR2NlBNZVp5Vm5IR0QxZ2x1bmlKdlU0c29IRW13In0”, “payload”: “eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJtYWlsLmhhc3RpbmdzdGVjaHMuY29tIn0sICJyZXNvdXJjZSI6ICJuZXctYXV0aHoifQ”, “signature”: “lZ5tiKSXanbPivGd5v5ee8sNg3sipWexmlXakkfZx4iHB3eniND6Fsy8B3g6FIGID0hQlFbMAAkrPwPPAWQlXa4_uihqMhG13m4ddkynM4_ffMjxMPL9iXzLA_DOkDyjVmhNA87c5-WovTMc_cC_n_gKX7oSjW1ELiqo5_aAb2hA2vqGrzxdh8tWifpdLAQt2g4zQ9Zhur8PtYaGmqHFY8orA-jsQZsf7bPmhy7400655ukhLCBk5exOi3Dbm44bG8ksiWWKV1lD5ujgBzznEOS26kTfXzAq88-PiZp_jUUCwgCoOBmA5UQHHqxJovYyRyAsI8ElozhZgvmYGqjO1g”}’}
  2015-12-07 19:36:44,368:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  2015-12-07 19:36:44,711:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/new-authz HTTP/1.1” 201 575
  2015-12-07 19:36:44,713:DEBUG:root:Received <Response [201]>. Headers: {‘Content-Length’: ‘575’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:44 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:44 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘EMuo3dBIA4MMuSGUYnT6ALTfcBRzcvsdc1N1WQwbXlU’}. Content: '{“identifier”:{“type”:“dns”,“value”:“mail.hastingstechs.com”},“status”:“pending”,“expires”:“2015-12-14T19:36:44.632200544Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215477",“token”:“23LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU”},{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478”,“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k”}],"combinations”:[[0],[1]]}'
  2015-12-07 19:36:44,713:DEBUG:acme.client:Storing nonce: '\x10\xcb\xa8\xdd\xd0H\x03\x83\x0c\xb9!\x94bt\xfa\x00\xb4\xdfp\x14sr\xfb\x1dsSuY\x0c\x1b^U’
  2015-12-07 19:36:44,714:DEBUG:acme.client:Received response <Response [201]> (headers: {‘Content-Length’: ‘575’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:44 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:44 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘EMuo3dBIA4MMuSGUYnT6ALTfcBRzcvsdc1N1WQwbXlU’}): '{“identifier”:{“type”:“dns”,“value”:“mail.hastingstechs.com”},“status”:“pending”,“expires”:“2015-12-14T19:36:44.632200544Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215477",“token”:“23LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU”},{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478”,“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k”}],"combinations”:[[0],[1]]}'
  2015-12-07 19:36:44,715:INFO:letsencrypt.auth_handler:Performing the following challenges:
  2015-12-07 19:36:44,716:INFO:letsencrypt.auth_handler:tls-sni-01 challenge for mail.hastingstechs.com
  2015-12-07 19:36:44,921:DEBUG:letsencrypt_apache.configurator:No Listen 443 directive found. Setting the Apache Server to Listen on port 443
  2015-12-07 19:36:48,057:DEBUG:letsencrypt.reverter:Creating backup of /etc/apache2/ports.conf
  2015-12-07 19:36:48,057:DEBUG:letsencrypt.reverter:Creating backup of /etc/apache2/apache2.conf
  2015-12-07 19:36:51,398:INFO:letsencrypt.auth_handler:Waiting for verification…
  2015-12-07 19:36:51,399:DEBUG:acme.client:Serialized JSON: {“keyAuthorization”: “oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo”, “type”: “tls-sni-01”, “resource”: “challenge”}
  2015-12-07 19:36:51,400:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
  2015-12-07 19:36:51,405:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
  2015-12-07 19:36:51,406:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478. args: (), kwargs: {‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “6tVt4OfPhc33n-UT54HV_M7AWtI09gh2eFzWcS6rwLHMVG-LVjsQuPSX47OE34AaXGsKJIRAVQdSAeRDPX9ti3yGi-9eq_vtfEvUty4sLJHbxwywCzWyXT0ztjegAzxfeScndleqn9b6QSIFMGU7nwxY9oIw5oYNIPyHkBhwDfkSTlv_G88LEYWuvcjD3mGfLmiZ4qvXF44w0KKSA7MxUk4yUwWOt6El0oUC55eRtBIiR-3S1f_uaU7eaJBjomYEB0ArC04TIX6Ynt8-1FTgJjtATlaVUuXNpuPZDuXR3pFQh50lolnwCq2eM7Q8BRjj7uBwK2paCs4agKG102lhZw”}}, “protected”: “eyJub25jZSI6ICJFTXVvM2RCSUE0TU11U0dVWW5UNkFMVGZjQlJ6Y3ZzZGMxTjFXUXdiWGxVIn0”, “payload”: “eyJrZXlBdXRob3JpemF0aW9uIjogIm9TZWVOa2ZWTW01LVhtNW9BdzdMVDQ0UVFfZE8wNGlLbDBjR3lleXQ2OGsudkxtWW5DNnBZOTh4MFc1bjlzWS03N244eU5QeHNRZk1reHdFTHd4T3BxbyIsICJ0eXBlIjogInRscy1zbmktMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0”, “signature”: “BgqXj7eHgZsY4yyijFxpk7_1u9jR5P0Oh0R12H6KW24TEzvYqtEdnqTJRJ_Ir3gNR7YiBG70lwrp1ukULGGJhHI21vGAEarArlczuNZgSInQ_yav2xHUuXG0nRBc1RBnfc8rKG9bAv8FovSFFVh7F525eSatBZxZtXkMP1KkhpheM5gQoPGdJE4tDWt-govdeoNgueDjtJhJ5L0YTkCP0gpCTTwN2RalyhLo5hELp-wlv150Ngmvyt2hC_NlaPjY2wW4_pKBiYL8SPYL8R1nvLen1cv838Hrwf6_n8W6pRGZ4d5oHkMiAOLHI-k7Hqc4wu2qJ-04H0snV67XRRzrcA”}’}
  2015-12-07 19:36:51,407:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  2015-12-07 19:36:51,768:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478 HTTP/1.1” 202 315
  2015-12-07 19:36:51,770:DEBUG:root:Received <Response [202]>. Headers: {‘Content-Length’: ‘315’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:51 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow;rel=“up”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:51 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘nTggX3vQLol5tEi_7XUVZd6Iofhy_YMhsA9RVcIyB1E’}. Content: '{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478",“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k”,“keyAuthorization”:"oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo”}'
  2015-12-07 19:36:51,771:DEBUG:acme.client:Storing nonce: '\x9d8 _{\xd0.\x89y\xb4H\xbf\xedu\x15e\xde\x88\xa1\xf8r\xfd\x83!\xb0\x0fQU\xc22\x07Q’
  2015-12-07 19:36:51,771:DEBUG:acme.client:Received response <Response [202]> (headers: {‘Content-Length’: ‘315’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:51 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow;rel=“up”’, ‘Location’: ‘https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:51 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘nTggX3vQLol5tEi_7XUVZd6Iofhy_YMhsA9RVcIyB1E’}): '{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478",“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k”,“keyAuthorization”:"oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo”}'
  2015-12-07 19:36:54,774:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow. args: (), kwargs: {}
  2015-12-07 19:36:54,775:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  2015-12-07 19:36:55,229:DEBUG:requests.packages.urllib3.connectionpool:“GET /acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow HTTP/1.1” 200 910
  2015-12-07 19:36:55,231:DEBUG:root:Received <Response [200]>. Headers: {‘Content-Length’: ‘910’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:55 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:55 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘B5hpNybhDKgpGjeax-7NvdlgjyLU9_8qDgwFPnIZeiE’}. Content: '{“identifier”:{“type”:“dns”,“value”:“mail.hastingstechs.com”},“status”:“invalid”,“expires”:“2015-12-14T19:36:44Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215477",“token”:“23LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU”},{“type”:“tls-sni-01”,“status”:“invalid”,“error”:{“type”:“urn:acme:error:connection”,“detail”:"Failed to connect to host for DVSNI challenge”},“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478",“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k”,“keyAuthorization”:“oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo”,“validationRecord”:[{“hostname”:“mail.hastingstechs.com”,“port”:“443”,“addressesResolved”:[“135.0.48.8”],“addressUsed”:“135.0.48.8”}]}],"combinations”:[[0],[1]]}'
  2015-12-07 19:36:55,232:DEBUG:acme.client:Received response <Response [200]> (headers: {‘Content-Length’: ‘910’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:55 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘https://acme-v01.api.letsencrypt.org/acme/new-cert;rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:55 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘B5hpNybhDKgpGjeax-7NvdlgjyLU9_8qDgwFPnIZeiE’}): '{“identifier”:{“type”:“dns”,“value”:“mail.hastingstechs.com”},“status”:“invalid”,“expires”:“2015-12-14T19:36:44Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215477",“token”:“23LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU”},{“type”:“tls-sni-01”,“status”:“invalid”,“error”:{“type”:“urn:acme:error:connection”,“detail”:"Failed to connect to host for DVSNI challenge”},“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478",“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k”,“keyAuthorization”:“oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo”,“validationRecord”:[{“hostname”:“mail.hastingstechs.com”,“port”:“443”,“addressesResolved”:[“135.0.48.8”],“addressUsed”:“135.0.48.8”}]}],"combinations”:[[0],[1]]}'
  2015-12-07 19:36:55,233:INFO:letsencrypt.reporter:Reporting to user: The following ‘urn:acme:error:connection’ errors were reported by the server:

Domains: mail.hastingstechs.com
Error: The server could not connect to the client for DV
2015-12-07 19:36:55,234:INFO:letsencrypt.auth_handler:Cleaning up challenges
2015-12-07 19:36:55,722:DEBUG:letsencrypt.cli:Exiting abnormally:
Traceback (most recent call last):
File “/root/.local/share/letsencrypt/bin/letsencrypt”, line 11, in
sys.exit(main())
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 1283, in main
return args.func(args, config, plugins)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 512, in obtain_cert
_auth_from_domains(le_client, config, domains)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 336, in _auth_from_domains
lineage = le_client.obtain_and_enroll_certificate(domains)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 283, in obtain_and_enroll_certificate
certr, chain, key, _ = self.obtain_certificate(domains)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 266, in obtain_certificate
return self._obtain_certificate(domains, csr) + (key, csr)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 224, in _obtain_certificate
authzr = self.auth_handler.get_authorizations(domains)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth_handler.py”, line 84, in get_authorizations
self._respond(cont_resp, dv_resp, best_effort)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth_handler.py”, line 142, in _respond
self._poll_challenges(chall_update, best_effort)
File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth_handler.py”, line 204, in _poll_challenges
raise errors.FailedChallenges(all_failed_achalls)
FailedChallenges: Failed authorization procedure. mail.hastingstechs.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client for DV :: Failed to connect to host for DVSNI challenge

[pfg]

@wolfie

We were unable to find a vhost with a ServerName or Address of mail.hastingstechs.com.Which virtual host would you like to choose?

1: default-ssl.conf | | HTTPS |2: default-ssl.conf.old | | HTTPS |3: 000-default.conf | | | Enabled4: 000-default-le-ssl.conf | | HTTPS | Enabled

Select the appropriate number [1-4] then [enter] (press 'c' to cancel): 1

Are you sure default-ssl.conf is the VHost that handles https://mail.hastingstechs.com? The client indicates it's disabled. With tls-sni-01, Let's Encrypt has to modify the correct VHost configuration to solve the challenge - this might not work if you pick the wrong VHost here.

If you can live with a minute of downtime, I would recommend using the apache plugin in standalone mode, where Let's Encrypt takes over port 80 for a short period to serve challenge files.

Another option would be using the webroot plugin and do the apache configuration on your own. This would avoid any downtime.

[pfg]

@sixberk

2015-12-07 19:28:22,290:DEBUG:letsencrypt.cli:Arguments: ['-webroot', '-w', '/home/www.domain.com/', '--apache']

I don't think you can combine --apache with --webroot - they're separate plugins. The apache plugin supports tls-sni-01 or standalone mode (where letsencrypt spawns a web server temporarily to serve challenge files). If you would like to use webroot, call the client with certonly --webroot -w /home/www.domain.com/ and configure apache manually.

[wolfie]

Standalone was able to pull the certs but does not appear to have applied them to the config for apache.
This may be an issue with the way zentyal is built.
I was very likely pointing to the wrong config file. Using one of the enabled ones results in the same error.

Thank you for the assistance.

[sixberk]

I tried witout webroot only --apache and same result

[pfg]

I tried connecting to port 443 (https) on the IP in your log (95.129.96.133) but was unable to. With tls-sni-01 Let’s Encrypt needs to be able to connect via https from their CA server. Make sure no firewall rules are interfering or switch to a plugin that only requires HTTP access (e.g. webroot or apache in standalone mode).