.well-know missing?

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: thecweb.com

I ran this command: sudo certbot renew --apache --dry-run -v

It produced this output:

Processing /etc/letsencrypt/renewal/thecweb.com.conf


Certificate is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer apache
Simulating renewal of an existing certificate for thecweb.com
Performing the following challenges:
http-01 challenge for thecweb.com
Waiting for verification...
Challenge failed for domain thecweb.com
http-01 challenge for thecweb.com

Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: thecweb.com
Type: connection
Detail: 136.34.226.127: Fetching http://thecweb.com/.well-known/acme-challenge/E_LhTgibqO48nz4rbFvGdIcMuVSdsclNkpFu-430Wo0: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

Cleaning up challenges
Failed to renew certificate thecweb.com with error: Some challenges have failed.

My web server is (include version): apache 2.4.41

The operating system my web server runs on is (include version): Ubuntu 20.04

My hosting provider, if applicable, is: Self hosted

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 1.21.0

I can't find the directory ,well-know in my /var/www/thecweb.com directory, so I'm not sure if that is the issue. I can load my site, but I get a 404 error when loading the challenge URL.

I can't access your site at all: did you open your firewall?

6 Likes

It loads for me, but I may have broken something troubleshooting. I'll message once it is working again.

Ok, now it loads on the internet now, and the certs are renewing. Thanks for the help! I had a firewall issue.

4 Likes

Sounds like the certificate authority guessed right in diagnosing the problem. :wink:

I'm glad to hear it's working now.

7 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.