Unable to renew the certificate

Help
1

My domain is:

momchildg.com
https://crt.sh/?q=momchildg.com

I ran this command:
certbot renew

It produced this output:

Saving debug log to /Certbot/log/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /Certbot/renewal/momchildg.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Hook 'pre-hook' ran with output:
 Stopping nginx...
 Correcto: se terminĀ¢ el proceso "nginx.exe" con PID 9012.
 Correcto: se terminĀ¢ el proceso "nginx.exe" con PID 8144.
 Stopping PHP FastCGI...
 Correcto: se terminĀ¢ el proceso "php-cgi-spawner.exe" con PID 2516.
 Correcto: se terminĀ¢ el proceso "php-cgi.exe" con PID 9152.
 Correcto: se terminĀ¢ el proceso "php-cgi.exe" con PID 9336.
 Correcto: se terminĀ¢ el proceso "php-cgi.exe" con PID 3152.
 Stopping MySQL...
 El servicio de MySQL 8.0 est  deteniā€šndose.
 El servicio de MySQL 8.0 se detuvo correctamente.
Renewing an existing certificate for momchildg.com

Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
  Domain: momchildg.com
  Type:   connection
  Detail: 83.138.45.103: Fetching http://momchildg.com/.well-known/acme-challenge/EJ51RphnnQDYjGSoCvw80um8pEqOJ57Nu1C0oaTBXng: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on port 80. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet.

Failed to renew certificate momchildg.com with error: Some challenges have failed.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
All renewals failed. The following certificates could not be renewed:
  /Certbot/live/momchildg.com/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

My web server is (include version):
nginx

The operating system my web server runs on is (include version):
windows

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):
yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

certbot 1.20.0

The command certbot certificates:

Found the following certs:
  Certificate Name: momchildg.com
    Serial Number: 40442d56436303b8e050e6386c9fbd9b5a8
    Key Type: RSA
    Domains: momchildg.com
    Expiry Date: 2024-08-11 00:53:43+00:00 (INVALID: EXPIRED)
    Certificate Path: /Certbot/live/momchildg.com/fullchain.pem
    Private Key Path: /Certbot/live/momchildg.com/privkey.pem
2

Welcome to the community @rapcat

I see your long consistent history of getting Let's Encrypt certs. Congratulations. I want you to know the EFF has discontinued support for Certbot on Windows. That is not affecting your current problem but long term you should look to use a different ACME Client. The Certify the Web client is probably easiest to use. See: Certbot Discontinuing Windows Beta Support in 2024

As for your problem, is your nginx running right now? Because I also timeout trying to reach it. Have you checked your public IP? I am wondering if it changed but you have not yet updated the DNS for the new address. Is that possible?

Otherwise, please start your nginx and we'll start by looking at the connectivity. Thanks

7 Likes
3

Hi, thank you very much for the assistance and useful information.

Have you checked your public IP? I am wondering if it changed but you have not yet updated the DNS for the new address. Is that possible?

Exactly! I found there's a problem with the domain provider, it wasn't updating the DNS. I just moved from godaddy to a better domain provider and everything is working fine again :grinning:

One question about Certbot on Windows. It has no longer updates but will it still working the next months if no changes are made in the system ?

Thank you very much

2 Likes
4

Yes, probably. Sorry, that's the best I can do :slight_smile:

4 Likes
5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.