Hi guys, I'm using letsencrypt certificates since several years but now the update aka renewal fails completely. The system is based on Ububtu 20.04 LTS and the apache webserver is the version 2.4.41. However, since some weeks this update process fails continously. I looks like the .well-known dir…

Ok, I disabled the main blocking rule and indeed port 80 was then reachable. Seems the blocking list are too mighty and maybe to general..... Thanks for openeing my eyes.

You've skipped all the questionnaire questions. What command are you running? Which mode is certbot working in?

Hi, I'm running certbot just as ist is. It's asking me to my domain in list and afterword I choose U for update. Certbot is working the apache mode. I had a lok at other threats and checked some issues but still I get the following result: Domain: www.broesecke.eu Type: connection Detail: Du…

[image] CH341A: But both fail with the same error message: "Cerbot failed to authenticate some domains (www.broesecke.eu) . During secondary validation the challenge couldn't be read, a time out occured. It looks like you are blocking connections from many parts of the world. For the HTTP Ch…

Yepp, I block a lot of connections. I had a several attacks some month ago and decided to block them as soon a possible. However, the port 80 is open but redicrt to my https site and both configs have the same web-root.

[image] CH341A: However, the port 80 is open but redicrt to my https site and both configs have the same web-root. You need to open your firewall to allow all port 80 connections. Does it have an API that you could open and close just during the renewal? Certbot has --pre-hook and --post-ho…

Hmm, port 80 isn't blocked in the firewall. Yes, I block certain networks on forwarding to my webserver. If I use my mobile phone and open up http://www.broesecke.eu I get the certificate error and approve it, I can see the content of my webserver. Can you please rfer to the documentiaon of pre and…

[image] CH341A: Hmm, port 80 isn't blocked in the firewall. Yes, I block certain networks Well then open whatever block you have on networks so Let's Encrypt challenges reach you. Or, switch to DNS Challenge The Certbot docs are here: User Guide — Certbot 5.0.0.dev0 documentation See also:…

Update Letsencrypt certificate fails

Help

petercooperjr August 16, 2025, 3:37pm 10

It may help to read through this description of why and how Let's Encrypt checks for control of the domain from many places around the world:

Topic		Replies	Views
Waiting for verification... Challenge failed for domain Help	9	6458	May 27, 2022
Let's Encrypt problems Help	8	489	November 24, 2024
Renew certificate throws "Some challenges have failed." Help	4	3238	October 22, 2019
Having difficulty renewing my certificate Help	10	1371	May 18, 2020
Firewall issue after cerbot update? Help	3	430	March 7, 2021

Update Letsencrypt certificate fails

Related topics