Coud not renew certificate for main domain

What type of hardware are you using: Old laptop or computer
What YunoHost version are you running: 12.1.40.1
How are you able to access your server: SSH
Are you in a special context or did you perform specific tweaking on your YunoHost instance ?: No

Describe your issue

Could not update the certificate for the main domain cybervalley.org

Share relevant logs or error messages

Error: Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/yunohost/vendor/acme_tiny/acme_tiny.py”, line 227, in get_crt
assert disable_check or _do_request(wellknown_url)[0] == keyauthorization
^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/yunohost/vendor/acme_tiny/acme_tiny.py”, line 89, in _do_request
raise ValueError(
ValueError: Error:
Url: http://pubsub.cybervalley.org/.well-known/acme-challenge/TTCx2GDGU9EOJOtEX-D-UZrEEGHc_n3KjqGPHBjKI54
Data: None
Response Code: None
Response: <urlopen error [Errno 111] Connection refused>

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/yunohost/certificate.py”, line 534, in _fetch_and_enable_new_certificate
signed_certificate = sign_certificate(
^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/yunohost/vendor/acme_tiny/acme_tiny.py”, line 229, in get_crt
raise ValueError(
ValueError: Wrote file to /var/www/.well-known/acme-challenge-public/TTCx2GDGU9EOJOtEX-D-UZrEEGHc_n3KjqGPHBjKI54, but couldn’t download http://pubsub.cybervalley.org/.well-known/acme-challenge/TTCx2GDGU9EOJOtEX-D-UZrEEGHc_n3KjqGPHBjKI54: Error:
Url: http://pubsub.cybervalley.org/.well-known/acme-challenge/TTCx2GDGU9EOJOtEX-D-UZrEEGHc_n3KjqGPHBjKI54
Data: None
Response Code: None
Response: <urlopen error [Errno 111] Connection refused>

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/yunohost/certificate.py”, line 422, in certificate_renew
_fetch_and_enable_new_certificate(domain, no_checks=no_checks)
File “/usr/lib/python3/dist-packages/yunohost/certificate.py”, line 547, in _fetch_and_enable_new_certificate
raise YunohostError(“certmanager_cert_signing_failed”)
yunohost.utils.error.YunohostError: Could not sign the new certificate

Error: Could not sign the new certificate
Error: Let’s Encrypt certificate renew failed for cybervalley.org

Full error log at https://paste.yunohost.org/raw/ihaciniwej

Is your pubsub subdomain available to Internet ?

Yes, I think so!

➜  ~ ping pubsub.cybervalley.org
PING cybervalley.org (92.243.26.87) 56(84) bytes of data.
64 bytes from cybervalley.org (92.243.26.87): icmp_seq=1 ttl=63 time=28.5 ms
64 bytes from cybervalley.org (92.243.26.87): icmp_seq=2 ttl=63 time=27.5 ms

From a computer not on the same lan!

http://pubsub.cybervalley.org/ open your yunohost login page.

This page http://pubsub.cybervalley.org/.well-known/acme-challenge/ gives me a 403

The same http://pubsub.cybervalley.org/.well-known/acme-challenge-public/ redirect me to yunohost login page

Any output if you run

yunohost tools regen-conf nginx -n -d

May also be helpful to run a diagnosis.

yunohost domain cert-renew --no-checks
1 Like