Sudo certbot renew failed

Well, I read a 502 as "something, somewhere" is responding to that http request.

I don't get why, though.

502 is "bad gateway"

504 is "gateway timeout"

1 Like

@9peppe How long of a timeout do you tolerate to see a 502? I am up to 300s and don't get one.

Maybe that's a clue it's a geography based firewall since you are Italy and I am US? Agree a well-behaved proxy would respond properly but we don't know what it is yet.

Agree someone must send 502. @edv can you tell us more about your hosting service? Are you shared hosting. Do you have any kind of CDN feature in it?

Can you show us result of this command:

sudo apachectl -S
2 Likes

It could be geography indeed.

1 Like

Hello @EDV,
I belong to the Hochschule of Music in NĂźrnberg and I am having the same problem as you, the creation of certificates with CertBot, which has always worked for all servers, has suddenly stopped working. Do you also have your servers hosted at the Technische Hochshule in NĂźrnberg? Because it seems to be a repeating pattern that didn't happen before.

Hello @EDV,

Ask where you host the servers to create a rule for that server in the acme-protocol application firewall. This has worked for me :).

Best regards.

2 Likes

Im here in Germany
The results of the Command:
VirtualHost configuration:
*:443 inet.bbs-ahaus.de (/etc/apache2/sites-enabled/000-default-le-ssl.conf:2)
*:80 is a NameVirtualHost
default server inet.bbs-ahaus.de (/etc/apache2/sites-enabled/000-default.conf:1)
port 80 namevhost inet.bbs-ahaus.de (/etc/apache2/sites-enabled/000-default.conf:1)
port 80 namevhost inet.bbs-ahaus.de (/etc/apache2/sites-enabled/wordpress.conf:1)
ServerRoot: "/etc/apache2"
Main DocumentRoot: "/var/www/html"
Main ErrorLog: "/var/log/apache2/error.log"
Mutex ssl-stapling: using_defaults
Mutex ssl-cache: using_defaults
Mutex default: dir="/var/run/apache2/" mechanism=default
Mutex mpm-accept: using_defaults
Mutex watchdog-callback: using_defaults
Mutex rewrite-map: using_defaults
Mutex ssl-stapling-refresh: using_defaults
PidFile: "/var/run/apache2/apache2.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="www-data" id=33
Group: name="www-data" id=33

Hello,
the servers are hosted here by us and nothing has changed behind our firewall there.
I don't find any blocked packets or the like in our firewall. Do you know exactly what kind of rule was created?

You have the same name defined in two places. That should not be.
Can you show the content of each of those files?
Please put 3 backticks before and after the output of each file like this:
Name 000-default.conf
```
contents of /etc/apache2/sites-enabled/000-default.conf
```
Name wordpress.conf
```
contents /etc/apache2/sites-enabled/wordpress.conf
```

3 Likes

Holy moly you saved my weekend. It was actually a firewall rule. I had everything correct from the Lan side but the acme protocol was missing on the Wan side. this application was then blocked
Thank you all for the support and sorry for the stupid mistake :grinning:

5 Likes

Have a nice weekend everyone and thanks again for the support :blush:

3 Likes
3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.