Hello, I run sudo certbot renew and I get:
Domain: tantramassagewarsaw.com
Type: connection
Detail: Fetching
http://tantramassagewarsaw.com/.well-known/acme-challenge/0JPv8i_1XO6y32rpQrbH4EnAg0LwteuRUSqL_feIR2s:
Timeout during connect (likely firewall problem)
Domain: www.tantramassagewarsaw.com
Type: connection
Detail: Fetching
http://www.tantramassagewarsaw.com/.well-known/acme-challenge/CnKEWlZQMUfI_Il-kQ29D-WExWSq-E4TMFLaU2Gufnw:
Timeout during connect (likely firewall problem)
The certs renewal have been working fine, but now this error appeared.
ufw status
Inactive
No other firewall installed.
Nginx vhost is:
server {
listen 80;
server_name tantramassagewarsaw.com www.tantramassagewarsaw.com;
root /var/www/masaztantrycznywarszawa.pl/masaztantrycznywarszawa.pl;
return 301 https://tantramassagewarsaw.com$request_uri;
}
server {
listen 443 ssl;
server_name tantramassagewarsaw.com;
root /var/www/masaztantrycznywarszawa.pl/masaztantrycznywarszawa.pl;
ssl_dhparam /etc/nginx/dhparam.pem;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_certificate "/etc/letsencrypt/live/tantramassagewarsaw.com/fullchain.pem";
ssl_certificate_key "/etc/letsencrypt/live/tantramassagewarsaw.com/privkey.pem";
ssl_protocols TLSv1.2;
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
return 301 https://www.tantramassagewarsaw.com$request_uri;
}
server {
listen 443 ssl;
server_name www.tantramassagewarsaw.com;
index index.php;
ssl_dhparam /etc/nginx/dhparam.pem;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_certificate "/etc/letsencrypt/live/tantramassagewarsaw.com/fullchain.pem";
ssl_certificate_key "/etc/letsencrypt/live/tantramassagewarsaw.com/privkey.pem";
ssl_protocols TLSv1.2;
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
add_header Strict-Transport-Security "max-age=31536000;";
root /var/www/masaztantrycznywarszawa.pl/masaztantrycznywarszawa.pl;
charset utf-8;
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/run/php/php-fpm.sock;
fastcgi_index index.php;
fastcgi_param SERVER_NAME $host;
include fastcgi_params;
}
location ~* \.(jpg|jpeg|png|gif|ico|css|js|woff|woff2)$ {
expires 365d;
}
}
==============
Other certificates in the same machine seemt o have well updated yesterday night automatically. Many of them have: (VALID: 79 days). But this one only doesn't seem to want to be renewed.
Any idea what else I can check?