Let's Encrypt certificates not renewing

Support
1

What type of hardware are you using: Virtual machine
What YunoHost version are you running: 12.0.17
How are you able to access your server: The webadmin
Direct access via physical keyboard/screen
Are you in a special context or did you perform specific tweaking on your YunoHost instance ?: No.

Describe your issue

Since May 19th, automatic Let’s Encrypt certificate renewal has been failing. The last successful automatic certificate renewal appears to have happened on May 8th. I’ve updated Yunohost once or twice since then, but I don’t know exactly when. The log I provided is from trying to renew the certificate of one of my subdomains manually this evening. Is anyone else having this problem? Any idea what to do about it?

Share relevant logs or error messages

https://paste.yunohost.org/raw/ipiyevuhuv

1 Like
2

Hello,
As the log indicates, it’s a DNS resolution issue. Have you checked with your registrar to see if the record is correct for this site?

3

Yes. The certificates for my domain and subdomains have successfully auto-renewed many times before and I haven’t made any changes with the registrar in a while. Interestingly, two of my subdomains that had been failing to renew since May 19th happened to successfully auto-renew just this past Saturday. Here are the latest success and failure logs for one of them. Other subdomains are still failing to auto-renew.

4

What does the YNH diagnosis return ?
nslookup shows that your subdomains are aliases (CNAMEs) pointing to another domain rather than your main domain.
Are certificate renewal failures and successes random?