What do i really have to do? how can i see wich is my sutuaction? how can i fix it, in case i’m wrong? Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparenc…

Hi @matiassklar [image] matiassklar: My domain is: kevingston.com your certificate is valide, so this isn't a critical problem. Check your Certbot version, perhaps update it. If the renew doesn't work (~~ start 02-2019), try .--preferred-challenges http an open port 80 is required.

What if i dont want to allow the 80 port? thnx in advance.

Thanks for your fast reply. So my renew may fail on february? if yes it is critical situation endeed. I dont know what “try .–preferred-challenges http” means. Do I have to add that to any script? My inbound port 80 is opened. My certbot version is 0.14.2

I’m not expert only another user, but a read somewhere that: open /etc/letsencrypt/cli.ini and add to the end: preferred-challenges = http than renew the certboot with dryrun to check any error. After anything is fine, than renew the certboot.

[image] matiassklar: –preferred-challenges http It means that certbot should use http validation, not tls-sni-validation. If your port 80 is open and http works, this is good. But your certbot looks very old. Check Certbot Tagline if there is an upd…

Could you help me pls… What if i dont want to use port:80? How can i solve the emailed tls-sni question. My cetbot – version is: 0.26.1 I have only one domain. BUT i do not use the standard ports: 80 and 443. I use anothers instead. The cerbot is working fine know, but i do not know what will …

I ran this commands to do the certbot update: sudo apt-get update sudo apt-get install software-properties-common sudo add-apt-repository universe sudo add-apt-repository ppa:certbot/certbot sudo apt-get update sudo apt-get install python-certbot-apache Now the certbot version is 0.28.0. I…

[image] matiassklar: Congratulations You should be fine for regular renewals.

Thanks all for help in this issue.

[image] webalix: What if i dont want to use port:80? see: ACME TLS-SNI-01 Email -- Inboud Port 80 closed by design - #3 by jmorahan

TLS-SNI-01 validation is reaching end-of-life

Help

jmorahan January 18, 2019, 8:24pm 11

see: ACME TLS-SNI-01 Email -- Inboud Port 80 closed by design - #3 by jmorahan

Topic		Replies	Views
TLS-SNI-01 validation is reaching end-of-life Help	12	3970	January 28, 2019
Is TLS-SNI-01 still usable Help	4	2594	February 11, 2019
Renew: Incorrect validation certificate for tls-sni-01 challenge Help	5	9141	June 20, 2018
TLS-SNI-01 end of life / HTTP-01 with version 0.22 Help	11	1064	January 29, 2019
TLS-SNI-01 end-of-life Help	13	1695	January 21, 2019

TLS-SNI-01 validation is reaching end-of-life

Related topics