Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com ), so withholding your domain name here does not increase secrecy, but …

Welcome @hanscees There are only three successful responses to the challenge. You can see there are three that result in a 301 redirect. And then three with the 200. The first one was for a different challenge as it has a different URI token value. I looked up the countries for those IP and they w…

[image] hanscees: --force-renewal Please don't use this option if you don't know what it means (as a general rule: never use options you don't know the effect of). Especially, it does not magically force the ACME server to make authorizations valid.

Hi @hanscees , Using the online tool Let's Debug yields these results Connection refused https://letsdebug.net/www.hanscees.com/2012186?debug=y IssueFromLetsEncrypt ERROR A test authorization for www.hanscees.com to the Let's Encrypt staging service has revealed issues that may prevent any certif…

assumptions. I am using this to renew a domain that is not yet expired because I know the configuration in nginx is good.

First of all, yes I have several layers of security. One of them is geoblocking, but thats not on port 80 nor 443. The other is fail2ban that kicks you off if you try a few times too many. So the connection can be closed for several reasons. Two questions: Since geoblocking is essential to me, is…

[image] hanscees: I am using this to renew a domain that is not yet expired because I know the configuration in nginx is good. To me, this statement doesn't make much sense. Why try to renew a certificate when the certificate isn't due for renewal? And what does that have to do with the nginx…

Hi @hanscees , Please check out [image] Multi-Perspective Validation & Geoblocking FAQ Issuance Tech (…

well, this is strange. It now all works fine again. I was wrong previously in that I use geoblocking: thats only for email, not for http(s). So that could not have been a problem. I think what happened is that in one domain the nginx config was missing port 80 redirects. And perhaps while troublesh…

[image] hanscees: Two questions: Since geoblocking is essential to me, is there a list of ip's somewhere I can allowlist? What IP addresses does Let’s Encrypt use to validate my web server? Let’s Encrypt does not publish a list of IP addresses we use to validate, and these IP addresses ma…

Sudden renew failures but not firewall block

Help

schoen June 7, 2024, 7:44pm 8

Hi @hanscees,

Please check out

Topic		Replies	Views
Certbot renew fails with connection refused Help	29	2952	February 26, 2021
Certbot renew fails Help	15	266	April 30, 2025
Certificate Renewal Failed Help	22	1801	September 23, 2021
HTTP challenge failing Nginx HTTP to HTTPS redirect Help	13	186	October 3, 2024
Certbot renew failed 400 connection refused Help	11	2125	September 12, 2022

Sudden renew failures but not firewall block

Related topics