Paste P7828

Nextcloud certbot failure (2018-11-20)
ActivePublic

Authored by Sebastian_Berlin-WMSE on Tue, Nov 20, 7:33 AM.
$ sudo snap run nextcloud.renew-certs
Saving debug log to /var/snap/nextcloud/current/certs/certbot/logs/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing
/var/snap/nextcloud/current/certs/certbot/config/renewal/nextcloud.wikimedia.se-0001.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator nextcloud:webroot, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for nextcloud.wikimedia.se
Using the webroot path /var/snap/nextcloud/current/certs/certbot for all domains.
Waiting for verification...
Cleaning up challenges
Attempting to renew cert (nextcloud.wikimedia.se-0001) from /var/snap/nextcloud/current/certs/certbot/config/renewal/nextcloud.wikimedia.se-0001.conf produced an unexpected error: Failed authorization procedure. nextcloud.wikimedia.se (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://nextcloud.wikimedia.se/.well-known/acme-challenge/<HASH>: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p". Skipping.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing
/var/snap/nextcloud/current/certs/certbot/config/renewal/nextcloud.wikimedia.se.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator nextcloud:webroot, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for collabora.wikimedia.se
http-01 challenge for nextcloud.wikimedia.se
Using the webroot path /var/snap/nextcloud/current/certs/certbot for all domains.
Waiting for verification...
Cleaning up challenges
Attempting to renew cert (nextcloud.wikimedia.se) from /var/snap/nextcloud/current/certs/certbot/config/renewal/nextcloud.wikimedia.se.conf produced an unexpected error: Failed authorization procedure. collabora.wikimedia.se (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://collabora.wikimedia.se/.well-known/acme-challenge/<HASH>: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p", nextcloud.wikimedia.se (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://nextcloud.wikimedia.se/.well-known/acme-challenge/<HASH>: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p". Skipping.
All renewal attempts failed. The following certs could not be renewed:
/var/snap/nextcloud/current/certs/certbot/config/live/nextcloud.wikimedia.se-0001/fullchain.pem (failure)
/var/snap/nextcloud/current/certs/certbot/config/live/nextcloud.wikimedia.se/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
All renewal attempts failed. The following certs could not be renewed:
/var/snap/nextcloud/current/certs/certbot/config/live/nextcloud.wikimedia.se-0001/fullchain.pem (failure)
/var/snap/nextcloud/current/certs/certbot/config/live/nextcloud.wikimedia.se/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Running post-hook command: restart-apache
Output from restart-apache:
Restarting apache... done
2 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: collabora.wikimedia.se
Type: unauthorized
Detail: Invalid response from
http://collabora.wikimedia.se/.well-known/acme-challenge/<HASH>:
"<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML
2.0//EN\">\n<html><head>\n<title>404 Not
Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p"
Domain: nextcloud.wikimedia.se
Type: unauthorized
Detail: Invalid response from
http://nextcloud.wikimedia.se/.well-known/acme-challenge/<HASH>:
"<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML
2.0//EN\">\n<html><head>\n<title>404 Not
Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p"
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.
- The following errors were reported by the server:
Domain: nextcloud.wikimedia.se
Type: unauthorized
Detail: Invalid response from
http://nextcloud.wikimedia.se/.well-known/acme-challenge/<HASH>:
"<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML
2.0//EN\">\n<html><head>\n<title>404 Not
Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p"
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.