search

scottmuc / infrastructure

Documentation / Automation for personal third-party infrastructure
The Unlicense
10 stars 2 forks source link

Fix `certbox renew` #15

Closed scottmuc closed 3 years ago

scottmuc commented 3 years ago 
Cert not due for renewal, but simulating renewal for dry run
Plugins selected: Authenticator webroot, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for home.scottmuc.com
Waiting for verification...
Cleaning up challenges
Attempting to renew cert (home.scottmuc.com) from /etc/letsencrypt/renewal/home.scottmuc.com.conf produced an unexpected error: Failed authorization procedure. home.scottmuc.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from https://home.scottmuc.com/.well-known/acme-challenge/33uZzzmjw2SNBd19IpQ2bK_UgSoIl9jF1iL644fpBsg [79.244.147.235]: "<html>\r\n<head><title>404 Not Found</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>404 Not Found</h1></center>\r\n<hr><center>". Skipping.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/www.goodenoughmoney.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert not due for renewal, but simulating renewal for dry run
Plugins selected: Authenticator webroot, Installer None
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for www.goodenoughmoney.com
Cleaning up challenges
Attempting to renew cert (www.goodenoughmoney.com) from /etc/letsencrypt/renewal/www.goodenoughmoney.com.conf produced an unexpected error: Missing command line flag or config entry for this setting:
Input the webroot for www.goodenoughmoney.com:. Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/home.scottmuc.com/fullchain.pem (failure)
  /etc/letsencrypt/live/www.goodenoughmoney.com/fullchain.pem (failure)
scottmuc commented 3 years ago

This was an issue related to http access. The 301 redirect would take precendence.

This commit fixes the issues: https://github.com/scottmuc/infrastructure/commit/5bb67bd4b4894eae8410a01e36e900138b08e3b0