If parts of your letsencrypt renewals succeed and others give you “urn:acme:error:connection” then just retry
Posted by jpluimers on 2018/12/10
On the same server, part of my letsencrypt renewals worked fine, while others had an error like this:
------------------------------------------------------------------------------- Processing /etc/letsencrypt/renewal/spring4d.4delphi.com.conf ------------------------------------------------------------------------------- Cert is due for renewal, auto-renewing... Renewing an existing certificate Performing the following challenges: tls-sni-01 challenge for spring4d.4delphi.com Waiting for verification... Cleaning up challenges Attempting to renew cert from /etc/letsencrypt/renewal/spring4d.4delphi.com.conf produced an unexpected error: Failed authorization procedure. spring4d.4delphi.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Error getting validation data. Skipping. ... - The following errors were reported by the server: Domain: spring4d.4delphi.com Type: connection Detail: Error getting validation data To fix these errors, please make sure that your domain name was entered correctly and the DNS A record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided.
A retry worked fine:
------------------------------------------------------------------------------- Processing /etc/letsencrypt/renewal/spring4d.4delphi.com.conf ------------------------------------------------------------------------------- Cert is due for renewal, auto-renewing... Renewing an existing certificate Performing the following challenges: tls-sni-01 challenge for spring4d.4delphi.com Waiting for verification... Cleaning up challenges ... The following certs were successfully renewed: /etc/letsencrypt/live/spring4d.4delphi.com/fullchain.pem (success)
–jeroen
The Wiert Corner - irregular stream of stuff 
Leave a comment