Question
My certbot renewal is failing and I'm not sure how to fix it.
- Posted on January 18, 2024
- DigitalOcean DropletsLet's EncryptUbuntu 22.04
Asked by FloatingGreenBlueFish
Hey! I’m trying to figure out how to renew my SSL certificate. I ran certbot renew and got the followinng;
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/budgie.eco.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Renewing an existing certificate for budgie.eco and www.budgie.eco
Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain: www.budgie.eco
Type: unauthorized
Detail: 2400:cb00:2049:1::adf5:3a33: Invalid response from http://www.budgie.eco/.well-known/acme-challenge/y2VuDfb1cMfTzb-51udcDMvMZEcgv_QmUdUiZl6gpCE: 409
Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.
Failed to renew certificate budgie.eco with error: Some challenges have failed.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
All renewals failed. The following certificates could not be renewed:
/etc/letsencrypt/live/budgie.eco/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
Any suggestions on how I can fix it?
Thanks so much
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Get our biweekly newsletter
Sign up for Infrastructure as a Newsletter.
Hollie's Hub for Good
Working on improving health and education, reducing inequality, and spurring economic growth? We'd like to help.
Become a contributor
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Heya @floatinggreenbluefish,
When I try and open the website, I get;
Baiscally, I can’t reach your website and this means Let’s Encrypt cant reach it as well to validate the domain.
Hey!
Based on the error message you’ve shared, it seems like the main issue is with the domain
www.budgie.eco. The error type ‘unauthorized’ and the detail about an invalid response from the.well-known/acme-challengedirectory indicate a problem with the domain validation process. Here are a few steps you can follow to troubleshoot this issue:budgie.ecoandwww.budgie.ecoare correctly pointing to the IP address of your DigitalOcean Droplet. You can verify this using a DNS lookup tool:.well-known/acme-challengedirectory. This is important for Let’s Encrypt to validate your domain ownership, if not it will fail. Specifically, allow access to the/.well-knowndirectory used by Let’s Encrypt for domain validation. You can do this by adding a rule to your Nginx configuration:Running Certbot with the
-vflag (verbose mode) can also give you more detailed information about the process and where it might be failing.If you’ve recently changed DNS settings, remember it can take some time for these changes to propagate. You might just need to wait a little longer.
Let me know how it goes!
Best,
Bobby