[Solved] Renewing certificate help

Help
#1

I have problems renewing my certificate.

Domain: css.polijeux.com
Type: connection
Detail: Connection refused

The domains does not have AAAA entry.
certbot version: 0.18.1

I am running: certbot-auto renew

What can i do?
Thanks

#2

Please fill out all fields on the form presented. How did you attempt to renew this? Please give the full output of your attempts. Also, how did you issue this certificate initially?

All this tells us is that your server is refusing a connection. Perhaps you have a misconfigured firewall?

#3

Hi Jared.

  1. How did you attempt to renew this?

From my server I run: certbot-auto renew

  1. Full output

/opt/eff.org/certbot/venv/lib/python2.6/site-packages/cryptography/init.py:26: DeprecationWarning: Python 2.6 is no longer supported by the Python core team, please upgrade your Python. A future version of cryptography will drop support for Python 2.6
DeprecationWarning
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
/opt/eff.org/certbot/venv/lib/python2.6/site-packages/acme/jose/jwa.py:110: DeprecationWarning: signer and verifier have been deprecated. Please use sign and verify instead.
signer = key.signer(self.padding, self.hash)
Performing the following challenges:
tls-sni-01 challenge for css.polijeux.com
Waiting for verification…
Cleaning up challenges
Attempting to renew cert (zjuegos.com.ar) from /etc/letsencrypt/renewal/zjuegos.com.ar.conf produced an unexpected error: Failed authorization procedure. css.polijeux.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Connection refused,
Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/zjuegos.com.ar/fullchain.pem (failure)

Processing /etc/letsencrypt/renewal/zjuegos.com.ar.conf

All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/zjuegos.com.ar/fullchain.pem (failure)

1 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: css.polijeux.com
    Type: connection
    Detail: Connection refused

    To fix these errors, please make sure that your domain name was
    entered correctly and the DNS A/AAAA record(s) for that domain
    contain(s) the right IP address. Additionally, please check that
    your computer has a publicly routable IP address and that no
    firewalls are preventing the server from communicating with the
    client. If you’re using the webroot plugin, you should also verify
    that you are serving files from the webroot path you provided.

  1. how did you issue this certificate initially?

I executed in my server: certbot-auto --apache certonly

  1. Firewall

I don’t have a misconfigured firewall. I can access the domain by wget or browser.

Thanks
Marcos.

#4

@mcanan install python2.7

#5

Thanks. That solved it.

#6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.