Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com ), so withholding your domain name here does not increase secrecy, but …

[image] ShredderFeeder: Done, and done, and restarted, same exact error: Not exactly. You no longer get the message about these addresses [image] ShredderFeeder: Using default addresses 80 and [::]:80 ipv6only=on for authentication. HTTP requests are not reaching that nginx. Does yo…

Welcome @ShredderFeeder HTTP requests to your domain name are broken. My first guess is your nginx config is wrong. My second guess is your NAT or port-forwarding is setup wrong. HTTP requests are being handled by an nginx server block that requires HTTPS. You have an unusual warning message fo…

It's a mastodon instance, it ran perfectly up until the cert expiration.. Tried to do a renew and it seems to be getting stuck behind the HTTP-->HTTPS redirect but I have no idea how to undo that.

It would seem that your Port 80 is expecting HTTPS connections HTTP to Port 80 $ curl -Ii http://shredderfood.com/.well-known/acme-challenge/sometestfile HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Thu, 30 Mar 2023 15:44:27 GMT Content-Type: text/html Content-Length: 255 Connection: close …

Your nginx server blocks are faulty. In /etc/nginx/conf.d/mastodon.conf You have two lines for server_name. One is in your server block for HTTP (has listen 80;) and the other for HTTPS (listen 443 ssl http2;). The server_name should match your domain name. Yours do not. In HTTP server block c…

Done, and done, and restarted, same exact error: Cert is due for renewal, auto-renewing... Plugins selected: Authenticator nginx, Installer nginx Renewing an existing certificate for shredderfood.com Performing the following challenges: http-01 challenge for shredderfood.com Waiting for verif…

Thank you, that was the hint I needed. I had the 80-->443 configured in nginix, I ALSO had 80-->443 configured in the firewall. I had to rebuild my PFSense last week and did so hastily, So that's on me, though the firewall redirection rules were restored from a backup so I'm not sure why it ever w…

[image] ShredderFeeder: So that's on me, though the firewall redirection rules were restored from a backup so I'm not sure why it ever worked. It probably was not working for HTTP requests since that backup. You just might not have known it until now if just using HTTPS requests. Some brows…

Well I appreciate your help. 30 years in IT and there is always something new to learn. :slight_smile:

Trying to renew expired certficiate failing with challenge failed error

Help

Topic		Replies	Views
Challenge failed when renewing Help	9	1421	April 5, 2023
SSL renewal failing when using certbot renew Help	12	648	March 21, 2024
Certbot Renew Challenge failed Help	7	394	June 13, 2024
Certbot renew fails even when the challenge HTTP request is working Help	25	7956	February 4, 2022
Acme-challenge fails Help	19	1659	February 23, 2023

Trying to renew expired certficiate failing with challenge failed error

Related topics