My domain is: symworld.com I ran this command: Tried to renew SSL Cert using virtualmin’s interface It produced this output: Traceback (most recent call last): File “/usr/share/webmin/webmin/acme_tiny.py”, line 198, in main(sys.argv[1:]) File “/usr/share/webmin/webmin/acme_tiny.py”, line 194,…

Checked my server access logs and seeing these records after the renewal has timed out: 65.19.128.70 - - [08/Mar/2020:02:12:29 +0800] “GET /.well-known/acme-challenge/gfgICDjtij3qwWDM0a4VF70fvTs5nPTf8kMaf7Vhb8c HTTP/1.1” 404 439 “-” “Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTM…

Hi @suhayls [image] suhayls: ValueError: Wrote file to /home/symworld.com/public_html/.well-known/acme-challenge/gfgICDjtij3qwWDM0a4VF70fvTs5nPTf8kMaf7Vhb8c, but couldn’t download http://www.symworld.com/.well-known/acme-challenge/gfgICDjtij3qwWDM0a4VF70fvTs5nPTf8kMaf7Vhb8c: Error: Url: http:/…

Hi Juergen, I’ve checked with my server administrator and apparently there are no special blocking on HTTP/S requests. What are the URL/IP used for querying the let’s encrypt? Maybe I can try to trace from the server if it is indeed being blocked.

[image] suhayls: What are the URL/IP used for querying the let’s encrypt? Letsencrypt uses multi perspective validation: [image] ACME v1/v2: Validating challenges from multiple network vantage points API Announcements O… So you shouldn't block any ip address.

I have checked with my server and the provider, it doesn’t seem like any IPs/Domains are currently blocked. Would a domain validation work instead?

That's [image] suhayls: ValueError: Wrote file to /home/symworld.com/public_html/.well-known/acme-challenge/gfgICDjtij3qwWDM0a4VF70fvTs5nPTf8kMaf7Vhb8c, but couldn’t download http://www.symworld.com/.well-known/acme-challenge/gfgICDjtij3qwWDM0a4VF70fvTs5nPTf8kMaf7Vhb8c: Error: Url: http://www.…

I’ve just tried to run the acme_tiny.py from the command line but I get the same problem. See output below: root@symworld:/home/symworld.com# python /usr/share/webmin/webmin/acme_tiny.py --account-key ssl.key --csr ssl.csr --acme-dir /home/symworld.com/public_html/.well-known/acme-challenge/ > ssl.…

you are serving http on port 443, that should be https. does this link work for you? http://www.symworld.com/.well-known/acme-challenge/9_tYgJiVbK02okpb2WX1qOh5LlQmzC66GVvh-T8TRnY it redirects to https://www.symworld.com/.well-known/acme-challenge/9_tYgJiVbK02okpb2WX1qOh5LlQmzC66GVvh-T8TRnY and i…

I deleted all the SSL sites on the server and recreated them. That solved the issue and all the certs have been successfully renewed. Thanks for your help and input. Cheers!

Unable to renew certificates

Help

JuergenAuer March 8, 2020, 7:38am 5

Letsencrypt uses multi perspective validation:

So you shouldn't block any ip address.

Topic		Replies	Views
Virtualmin Web-based validation failed : Failed to request certificate : Help	3	1336	June 8, 2020
Renewal failed for some reason Help	43	2221	June 24, 2020
Certificate not deploying on Virtualmin Help	16	4362	May 6, 2020
Virtualmin: Lets Encrypt Web Based Validation failed Help	52	9424	March 24, 2020
Error while trying to renew or create a new cert. Other domains in same server update fine Help	3	1077	April 7, 2020

Unable to renew certificates

Related topics