# Unable to renew my certs

**URL:** <https://community.letsencrypt.org/t/unable-to-renew-my-certs/60944>\
**Category:** Help\
**Created:** [May 2, 2018, 1:19pm UTC](https://community.letsencrypt.org/t/unable-to-renew-my-certs/60944 "2018-05-02T13:19:30Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mr.D](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mr.d/32/22899_2.png) [@Mr.D](https://community.letsencrypt.org/u/Mr.D)\
**Post date:** [May 2, 2018, 1:19pm UTC](https://community.letsencrypt.org/t/unable-to-renew-my-certs/60944/1 "2018-05-02T13:19:30Z")

</div>

My domain is:

> **[Sigmaphi Cloud](https://shr.sigmaphi.fr/login)**
>
> Un endroit sûr pour toutes vos données

I ran this command:

certbot certonly --webroot --webroot-path \*\*\*\*\*\*\*\*\* --domain [shr.sigmaphi.fr](http://shr.sigmaphi.fr)

or

certbot renew

It produced this output:

Saving debug log to /var/log/letsencrypt/letsencrypt.log  
Cert is due for renewal, auto-renewing…  
Renewing an existing certificate  
Performing the following challenges:  
http-01 challenge for [shr.sigmaphi.fr](http://shr.sigmaphi.fr)  
Using the webroot path \*\*\*\*\*\*\* for all unmatched domains.  
Waiting for verification…  
Cleaning up challenges  
Failed authorization procedure. [shr.sigmaphi.fr](http://shr.sigmaphi.fr) (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching [https://shr.sigmaphi.fr.well-known/acme-challenge/8Hx-Y8jOQ-xkhgmW9e1rVOJZbU27kXmheXiejHOvhv0:](https://shr.sigmaphi.fr.well-known/acme-challenge/8Hx-Y8jOQ-xkhgmW9e1rVOJZbU27kXmheXiejHOvhv0:) Error getting validation data

IMPORTANT NOTES:

- The following errors were reported by the server:

My web server is (include version): apache2

Hello,

First sorry for my bad english.  
As you see, i can’t renew my certs and i don’t know why.  
Thanks for the help !

---

<div class="post-metadata">

**Author:** ![bytecamp](https://avatars.discourse-cdn.com/v4/letter/b/54ee81/32.png) [@bytecamp](https://community.letsencrypt.org/u/bytecamp)\
**Post date:** [May 2, 2018, 1:24pm UTC](https://community.letsencrypt.org/t/unable-to-renew-my-certs/60944/2 "2018-05-02T13:24:14Z")

</div>

> [@Mr.D](#):
>
> Detail: Fetching  
> [https://shr.sigmaphi.fr.well-known/acme-challenge/8Hx-Y8jOQ-xkhgmW9e1rVOJZbU27kXmheXiejHOvhv0:](https://shr.sigmaphi.fr.well-known/acme-challenge/8Hx-Y8jOQ-xkhgmW9e1rVOJZbU27kXmheXiejHOvhv0:)

Have a look at the redirect target ([https://shr.sigmaphi.fr.well-known/](https://shr.sigmaphi.fr.well-known/)), this is most likely the result of a misconfigured redirect (the slash is missing after the domain name).

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [May 2, 2018, 2:01pm UTC](https://community.letsencrypt.org/t/unable-to-renew-my-certs/60944/3 "2018-05-02T14:01:05Z")

</div>

I think that may have been fixed now and the cert has been renewed.  
But it seems that all connections end up at: [https://shr.sigmaphi.fr/login](https://shr.sigmaphi.fr/login)

Please place a test.txt file in the acme-challenge folder to test proper access.

Additionally, the web service has no cipher preference order.  
Try including something like this in your 443 configuration block:  
**`SSLCipherSuite`** `ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:!3DES:!CAMELLIA:!DES:!DSS:!IDEA:!MD5:!PSK:!RC4:!SEED`  
**`SSLHonorCipherOrder`** `on`

for more see: [https://httpd.apache.org/docs/trunk/ssl/ssl\_howto.html](https://httpd.apache.org/docs/trunk/ssl/ssl_howto.html)

---

<div class="post-metadata">

**Author:** ![Mr.D](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mr.d/32/22899_2.png) [@Mr.D](https://community.letsencrypt.org/u/Mr.D)\
**Post date:** [May 2, 2018, 2:24pm UTC](https://community.letsencrypt.org/t/unable-to-renew-my-certs/60944/4 "2018-05-02T14:24:31Z")

</div>

Hello again.  
Yes i found the problem with your help.  
The problem was in my apache.conf with a slash missing.

Thanks Bytecamp and rg305 for your advices !

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [June 1, 2018, 2:36pm UTC](https://community.letsencrypt.org/t/unable-to-renew-my-certs/60944/5 "2018-06-01T14:36:24Z")

</div>

Closed on June 1, 2018, 2:36pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.