Unable to auto renew certificates

[JuergenAuer]

Hi @abraunegg

@abraunegg

Port 80 is explicitly disabled on the system by network policies and this used to work flawlessly over the last 12 months not needing port 80 to perform the renewal process.

then you have used tls-sni-01 - validation. But this is deprecated, support ends 2019-02-13:

March 13, 2019: End-of-Life for All TLS-SNI-01 Validation Support

L…

So you have to use another validation method: http-01 or dns-01.

http-01 requires an open port 80. If you can't open port 80, you have to use dns-01 - validation.

There is another - rare supported and used - TLS-ALPN-01.