2020-02-26 09:39:24,872:DEBUG:certbot.main:certbot version: 0.31.0 2020-02-26 09:39:24,873:DEBUG:certbot.main:Arguments: ['--apache'] 2020-02-26 09:39:24,874:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2020-02-26 09:39:24,882:DEBUG:certbot.log:Root logging level set at 20 2020-02-26 09:39:24,883:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2020-02-26 09:39:24,884:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache 2020-02-26 09:39:25,123:DEBUG:certbot_apache.configurator:Apache version is 2.4.29 2020-02-26 09:39:25,814:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache Description: Apache Web Server plugin Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = certbot_apache.entrypoint:ENTRYPOINT Initialized: Prep: True 2020-02-26 09:39:25,817:DEBUG:certbot.plugins.selection:Selected authenticator and installer 2020-02-26 09:39:25,817:INFO:certbot.plugins.selection:Plugins selected: Authenticator apache, Installer apache 2020-02-26 09:39:25,822:DEBUG:certbot.main:Picked account: ), creation_host='servessai'))> 2020-02-26 09:39:25,824:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory. 2020-02-26 09:39:25,827:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org 2020-02-26 09:39:26,340:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 658 2020-02-26 09:39:26,342:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 26 Feb 2020 08:39:26 GMT Content-Type: application/json Content-Length: 658 Connection: keep-alive Cache-Control: public, max-age=0, no-cache X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "ke9ejVXVmTY": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" } 2020-02-26 09:39:26,343:DEBUG:certbot.util:Not suggesting name "servessai" Traceback (most recent call last): File "/usr/lib/python3/dist-packages/certbot/util.py", line 310, in get_filtered_names filtered_names.add(enforce_le_validity(name)) File "/usr/lib/python3/dist-packages/certbot/util.py", line 531, in enforce_le_validity "{0} needs at least two labels".format(domain)) certbot.errors.ConfigurationError: servessai needs at least two labels 2020-02-26 09:39:28,928:INFO:certbot.main:Obtaining a new certificate 2020-02-26 09:39:28,991:DEBUG:certbot.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0027_key-certbot.pem 2020-02-26 09:39:28,993:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0027_csr-certbot.pem 2020-02-26 09:39:28,994:DEBUG:acme.client:Requesting fresh nonce 2020-02-26 09:39:28,994:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce. 2020-02-26 09:39:29,121:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0 2020-02-26 09:39:29,123:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 26 Feb 2020 08:39:29 GMT Connection: keep-alive Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 0101qDaGIn6w4Hn-5HBufLQEGmaHbFK54pMKBBX6pOdCuHA X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 2020-02-26 09:39:29,123:DEBUG:acme.client:Storing nonce: 0101qDaGIn6w4Hn-5HBufLQEGmaHbFK54pMKBBX6pOdCuHA 2020-02-26 09:39:29,124:DEBUG:acme.client:JWS payload: b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "icecream.ixeo-conseil.com"\n }\n ]\n}' 2020-02-26 09:39:29,129:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvNjQ4NjQwNDUiLCAibm9uY2UiOiAiMDEwMXFEYUdJbjZ3NEhuLTVIQnVmTFFFR21hSGJGSzU0cE1LQkJYNnBPZEN1SEEiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9", "signature": "JhCbjb9TXfeuXt3JTKtVBwHPYuZmu6O9gupzsgydhEeVmzdEwN0SOLVf-4w0eNl8uJAvQkIOBQQzuRXD4Bl_hhODa1aQVZG7Onjd14Lyf_X5wd4JCKuVOq_KC49AtYPlNp-M6Wu5yPJnsE-ToqVXSm1-EhevP1ItE0FLOjkuzDPuvM6Ezbpxppd3mSn9LIavPUoiSpMRfEQhBB0BqDKrvxk-4r3KeTEJwDzSM6a18OrQnZvZFBfuPy_2RqqSId0mdrIKCExBuW0WmbMyV9DbPJTUF21N-A_ecVLu8Cl1YxZVoMMmpSiFxhNtVYdQPXQY5h2GVI2k3OCBq9VKK8FUDA", "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogImljZWNyZWFtLml4ZW8tY29uc2VpbC5jb20iCiAgICB9CiAgXQp9" } 2020-02-26 09:39:29,537:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 355 2020-02-26 09:39:29,538:DEBUG:acme.client:Received response: HTTP 201 Server: nginx Date: Wed, 26 Feb 2020 08:39:29 GMT Content-Type: application/json Content-Length: 355 Connection: keep-alive Boulder-Requester: 64864045 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Location: https://acme-v02.api.letsencrypt.org/acme/order/64864045/2450738132 Replay-Nonce: 0101WmfFhKaHLw-nFP79MS0ly4vPELWzhtrrmcK73fznvwc X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "status": "pending", "expires": "2020-03-04T08:39:29.443357855Z", "identifiers": [ { "type": "dns", "value": "icecream.ixeo-conseil.com" } ], "authorizations": [ "https://acme-v02.api.letsencrypt.org/acme/authz-v3/3019936991" ], "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/64864045/2450738132" } 2020-02-26 09:39:29,539:DEBUG:acme.client:Storing nonce: 0101WmfFhKaHLw-nFP79MS0ly4vPELWzhtrrmcK73fznvwc 2020-02-26 09:39:29,539:DEBUG:acme.client:JWS payload: b'' 2020-02-26 09:39:29,542:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/3019936991: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvNjQ4NjQwNDUiLCAibm9uY2UiOiAiMDEwMVdtZkZoS2FITHctbkZQNzlNUzBseTR2UEVMV3podHJybWNLNzNmem52d2MiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzMwMTk5MzY5OTEifQ", "signature": "oGGTfTfsb1Z9p0HeVuILqwnfNjr77G_96DXLO8nki1EI8KtpTg8nr4XxCLNdVUUOX5xm1wz50sdBszjuR7G2qGvG8OX9bIbsil7ey1FRIoK1oTbPz8wGpE0GJr6FVvYSgPoWBoQk2xpApTdqp-s9vKLTeIwXWErNEj4O7R0yC5E_xyL2TXGGzuj9_TFgU4hMYMaZYev0GtcQ4RISu3Ooz2Tk0p1SdtGPWaUeT7TGZw5zb7VYn7DqgH1Hxu3fOJ2tRFZlq5-9S4nbuSGW9EXURR8zFwm7q2OIlfbM1rMK6Z5gszmmTccHPOW920Y9EX2mgw1saGI1-l3eG9wAR0M-Ww", "payload": "" } 2020-02-26 09:39:29,699:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/3019936991 HTTP/1.1" 200 803 2020-02-26 09:39:29,700:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 26 Feb 2020 08:39:29 GMT Content-Type: application/json Content-Length: 803 Connection: keep-alive Boulder-Requester: 64864045 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 0101IRDSC05Qet2B-wPW2gyA8oHCtoPz0CyresqRlvFEYZY X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "icecream.ixeo-conseil.com" }, "status": "pending", "expires": "2020-03-04T08:39:29Z", "challenges": [ { "type": "http-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/3019936991/FfNhfg", "token": "eQ8CgR0a1ApbBQKCsTxwCRPwFnXGkqiSLYrvvojJYfo" }, { "type": "dns-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/3019936991/Hm21XQ", "token": "eQ8CgR0a1ApbBQKCsTxwCRPwFnXGkqiSLYrvvojJYfo" }, { "type": "tls-alpn-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/3019936991/tKaOcg", "token": "eQ8CgR0a1ApbBQKCsTxwCRPwFnXGkqiSLYrvvojJYfo" } ] } 2020-02-26 09:39:29,701:DEBUG:acme.client:Storing nonce: 0101IRDSC05Qet2B-wPW2gyA8oHCtoPz0CyresqRlvFEYZY 2020-02-26 09:39:29,702:INFO:certbot.auth_handler:Performing the following challenges: 2020-02-26 09:39:29,702:INFO:certbot.auth_handler:http-01 challenge for icecream.ixeo-conseil.com 2020-02-26 09:39:29,807:DEBUG:certbot_apache.http_01:Adding a temporary challenge validation Include for name: icecream.ixeo-conseil.com in: /etc/apache2/sites-enabled/icecream.ixeo-conseil.com.conf 2020-02-26 09:39:29,808:DEBUG:certbot_apache.http_01:writing a pre config file with text: RewriteEngine on RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END] 2020-02-26 09:39:29,808:DEBUG:certbot_apache.http_01:writing a post config file with text: Require all granted Require all granted 2020-02-26 09:39:29,827:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/icecream.ixeo-conseil.com.conf 2020-02-26 09:39:33,190:INFO:certbot.auth_handler:Waiting for verification... 2020-02-26 09:39:33,193:DEBUG:acme.client:JWS payload: b'{\n "resource": "challenge",\n "type": "http-01"\n}' 2020-02-26 09:39:33,199:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/3019936991/FfNhfg: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvNjQ4NjQwNDUiLCAibm9uY2UiOiAiMDEwMUlSRFNDMDVRZXQyQi13UFcyZ3lBOG9IQ3RvUHowQ3lyZXNxUmx2RkVZWlkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLXYzLzMwMTk5MzY5OTEvRmZOaGZnIn0", "signature": "Gf37c6OKSGrUXkOCQnbLDtmpIbUmdXZHqr6IA8b8IKzK2WsvlMueeBFgtDsz3dPqVMS-vZb1g4Bp5Lcb-bKmwg67NE3MgDr25bbgSmlM1WVXY2u-ULoJZf0JNFlny_g9vRkHnt4lYOkpweNL9M3xGLhqIERssDqssM_f4pPlBewBFIGnEoaQGrLk-hdVA6YFuioCqC2s6zFLPQ-sYDMWF2fhZ4pXJyYoQUv5dkwZFkQrKndo-GIUKi3r8lVU3_O7VZiOlFwNypZLAmfmUQIV4D3Hq18PrGkw3T8UCc_IQUeaFw_Kl_L5irEFF9yGFGGvC6RK3arE3NUexApepKclTQ", "payload": "ewogICJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLAogICJ0eXBlIjogImh0dHAtMDEiCn0" } 2020-02-26 09:39:33,383:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/3019936991/FfNhfg HTTP/1.1" 200 185 2020-02-26 09:39:33,385:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 26 Feb 2020 08:39:33 GMT Content-Type: application/json Content-Length: 185 Connection: keep-alive Boulder-Requester: 64864045 Cache-Control: public, max-age=0, no-cache Link: ;rel="index", ;rel="up" Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/3019936991/FfNhfg Replay-Nonce: 01010eDsf5SoXRymweNv5ylWdh_FYh2DK_7aN2FMmtL1vXg X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "type": "http-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/3019936991/FfNhfg", "token": "eQ8CgR0a1ApbBQKCsTxwCRPwFnXGkqiSLYrvvojJYfo" } 2020-02-26 09:39:33,385:DEBUG:acme.client:Storing nonce: 01010eDsf5SoXRymweNv5ylWdh_FYh2DK_7aN2FMmtL1vXg 2020-02-26 09:39:36,390:DEBUG:acme.client:JWS payload: b'' 2020-02-26 09:39:36,393:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/3019936991: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvNjQ4NjQwNDUiLCAibm9uY2UiOiAiMDEwMTBlRHNmNVNvWFJ5bXdlTnY1eWxXZGhfRlloMkRLXzdhTjJGTW10TDF2WGciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzMwMTk5MzY5OTEifQ", "signature": "VTnOoLhF2jxhA97BFlOP7K6epKwoAn0mV06N5QIJ47NUEjod8MOGzBUKUm31i-IS6-UMebJCdPrvnO2gCyPdu4nm5rKDFRY3EsFtE6aHhG4Y5UvBcsNRYjfooqprwwPQyZ5eiMFVxZWBcG4KY90Teb0gMOwQlZtL2891q42qDQCnN7IexcT-w2I14c7C-1Ktn0kbnSyk3r0IRZOzAwqAhp1QHSb_HlsP12iWvyWHF_KtJJYQhP8bN80U40Jj2z9CgJZGwWhExHpQRDWswhG5LAax8gEm6oExngQ1N87WdqzfHye7tuu5Uqorx0hmyfsm4DTLdXUSuu7ttm9zFEPa_g", "payload": "" } 2020-02-26 09:39:36,554:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/3019936991 HTTP/1.1" 200 1261 2020-02-26 09:39:36,555:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 26 Feb 2020 08:39:36 GMT Content-Type: application/json Content-Length: 1261 Connection: keep-alive Boulder-Requester: 64864045 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 0102l5N1nVcJ5X_RYpx2HUrra5fU_V0q0vcOW9h22G6wQWQ X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "icecream.ixeo-conseil.com" }, "status": "invalid", "expires": "2020-03-04T08:39:29Z", "challenges": [ { "type": "http-01", "status": "invalid", "error": { "type": "urn:ietf:params:acme:error:unauthorized", "detail": "Invalid response from http://icecream.ixeo-conseil.com/.well-known/acme-challenge/eQ8CgR0a1ApbBQKCsTxwCRPwFnXGkqiSLYrvvojJYfo [92.243.9.115]: \"\u003c!DOCTYPE HTML PUBLIC \\\"-//IETF//DTD HTML 2.0//EN\\\"\u003e\\n\u003chtml\u003e\u003chead\u003e\\n\u003ctitle\u003e403 Forbidden\u003c/title\u003e\\n\u003c/head\u003e\u003cbody\u003e\\n\u003ch1\u003eForbidden\u003c/h1\u003e\\n\u003cp\"", "status": 403 }, "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/3019936991/FfNhfg", "token": "eQ8CgR0a1ApbBQKCsTxwCRPwFnXGkqiSLYrvvojJYfo", "validationRecord": [ { "url": "http://icecream.ixeo-conseil.com/.well-known/acme-challenge/eQ8CgR0a1ApbBQKCsTxwCRPwFnXGkqiSLYrvvojJYfo", "hostname": "icecream.ixeo-conseil.com", "port": "80", "addressesResolved": [ "92.243.9.115" ], "addressUsed": "92.243.9.115" } ] } ] } 2020-02-26 09:39:36,556:DEBUG:acme.client:Storing nonce: 0102l5N1nVcJ5X_RYpx2HUrra5fU_V0q0vcOW9h22G6wQWQ 2020-02-26 09:39:36,558:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server: Domain: icecream.ixeo-conseil.com Type: unauthorized Detail: Invalid response from http://icecream.ixeo-conseil.com/.well-known/acme-challenge/eQ8CgR0a1ApbBQKCsTxwCRPwFnXGkqiSLYrvvojJYfo [92.243.9.115]: "\n\n403 Forbidden\n\n

Forbidden

\n\n\n403 Forbidden\n\n

Forbidden

\n load_entry_point('certbot==0.31.0', 'console_scripts', 'certbot')() File "/usr/lib/python3/dist-packages/certbot/main.py", line 1365, in main return config.func(config, plugins) File "/usr/lib/python3/dist-packages/certbot/main.py", line 1119, in run certname, lineage) File "/usr/lib/python3/dist-packages/certbot/main.py", line 121, in _get_and_save_cert lineage = le_client.obtain_and_enroll_certificate(domains, certname) File "/usr/lib/python3/dist-packages/certbot/client.py", line 410, in obtain_and_enroll_certificate cert, chain, key, _ = self.obtain_certificate(domains) File "/usr/lib/python3/dist-packages/certbot/client.py", line 353, in obtain_certificate orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names) File "/usr/lib/python3/dist-packages/certbot/client.py", line 389, in _get_order_and_authorizations authzr = self.auth_handler.handle_authorizations(orderr, best_effort) File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations self._respond(aauthzrs, resp, best_effort) File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 168, in _respond self._poll_challenges(aauthzrs, chall_update, best_effort) File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 239, in _poll_challenges raise errors.FailedChallenges(all_failed_achalls) certbot.errors.FailedChallenges: Failed authorization procedure. icecream.ixeo-conseil.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://icecream.ixeo-conseil.com/.well-known/acme-challenge/eQ8CgR0a1ApbBQKCsTxwCRPwFnXGkqiSLYrvvojJYfo [92.243.9.115]: "\n\n403 Forbidden\n\n

Forbidden

\n