[Solved] Webroot Renewal Fails

[schoen]

Thanks!

How are you creating your test files in /var/www/html/mail.nietostack.com/.well-known/acme-challenge (the ones that we can see in our browsers)?

[mitchel.nieto]

Through my FTP client

[Osiris]

And your Apache error log after the recent failure?

[mitchel.nieto]

error.txt (8.2 KB)

Attached. Thanks Osiris

[Osiris]

There’s no log of a http-01 request, but I did see this:

[Tue Oct 31 06:43:35.287342 2017] [:error] [pid 29661] [client 189.56.90.242:11128] script '/var/www/html/mail.nietostack.com/public_html/index.php' not found or unable to stat

Are you sure the DocumentRoot isn’t set to /var/www/html/mail.nietostack.com/public_html/?

If so, your webroot path should match accordingly.

[mitchel.nieto]

Looking at the Apache config, that seems to be the case. Can I modify the LetsEncrypt config for this site to point to /public_html/?

[Osiris]

The file /etc/letsencrypt/renewal/mail.nietostack.com.conf should contain a variable called webroot_path which should correspond with the DocumentRoot variable of Apache.

[mitchel.nieto]

Osiris, thank you! That was it. I looked at that before starting this thread but just was not connecting the pieces…

Schoen and rg305, thank you for all your assistance as well!

** DRY RUN: simulating 'certbot renew' close to cert expiry
**          (The test certificates below have not been saved.)

Congratulations, all renewals succeeded. The following certs have been renewed:
  /etc/letsencrypt/live/www.mitchelnieto.com/fullchain.pem (success)
  /etc/letsencrypt/live/nietostack.com/fullchain.pem (success)
  /etc/letsencrypt/live/www.mitchelnieto.tech/fullchain.pem (success)
  /etc/letsencrypt/live/mail.nietostack.com/fullchain.pem (success)
  /etc/letsencrypt/live/nietofamily.com/fullchain.pem (success)
** DRY RUN: simulating 'certbot renew' close to cert expiry
**          (The test certificates above have not been saved.)