Let´s Encrypt conf file broken?

**FloRet88** · Feb 23rd 2017

Hello,

we changed to a new server, but after manual migrating i get following error on activating SSL for domains.

Debian 8.7
PHP-FPM
I-MSCP 1.3.16
Let´s Encrypt and PHPSwitcher Plugin (latest Version)

Shell-Script

root@xxx:~# apache2ctl -tSyntax OKroot@xxx:~# ls -la /etc/apache2/imscp/beforeinsgesamt 12drwxr-xr-x 2 root root 4096 Jän 13 13:47 .drwxr-xr-x 3 root root 4096 Feb 23 09:46 ..-rw-r--r-- 1 root root 299 Feb 23 17:56 LetsEncrypt_Alias.conf

LE LOG:

Code

2017-02-23 16:33:36,250:DEBUG:certbot.main:Root logging level set at 20
2017-02-23 16:33:36,251:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2017-02-23 16:33:36,251:DEBUG:certbot.main:certbot version: 0.9.3
2017-02-23 16:33:36,251:DEBUG:certbot.main:Arguments: ['--text', '--agree-tos', '--non-interactive', '--email', '[email protected]', '--webroot', '--webroot-path', '/var/www/virtual/LetsEncrypt', '--domain', 'cb17.hr-automation.at', '--force-renewal', '--no-self-upgrade']
2017-02-23 16:33:36,252:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#nginx,PluginEntryPoint#standalone,PluginEntryPoint#manual,PluginEntryPoint#webroot,PluginEntryPoint#apache,PluginEntryPoint#null)
2017-02-23 16:33:36,252:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
2017-02-23 16:33:36,256:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot
Description: Place files in webroot directory
Interfaces: IAuthenticator, IPlugin
Entry point: webroot = certbot.plugins.webroot:Authenticator
Initialized: <certbot.plugins.webroot.Authenticator object at 0x7f57985a0390>
Prep: True
2017-02-23 16:33:36,257:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0x7f57985a0390> and installer None
2017-02-23 16:33:36,441:DEBUG:certbot.main:Picked account: <Account(cfcb5b4141df83754ba64108987511cb)>
2017-02-23 16:33:36,443:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
2017-02-23 16:33:36,447:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2017-02-23 16:33:36,803:DEBUG:requests.packages.urllib3.connectionpool:"GET /directory HTTP/1.1" 200 352
2017-02-23 16:33:36,803:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '352', 'Expires': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Boulder-Request-Id': '8pStedh2C9E8lzjthKUlgMmN5lJHSZLuwlbX0VeHTZ4', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 23 Feb 2017 16:33:36 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'XWrK3RMZRzPOHdeGYJDF6XXSgUPGN-xgYN_wTes5T_Y'}. Content: '{\n "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change",\n "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz",\n "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert",\n "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg",\n "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"\n}'
2017-02-23 16:33:36,804:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '352', 'Expires': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Boulder-Request-Id': '8pStedh2C9E8lzjthKUlgMmN5lJHSZLuwlbX0VeHTZ4', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 23 Feb 2017 16:33:36 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'XWrK3RMZRzPOHdeGYJDF6XXSgUPGN-xgYN_wTes5T_Y'}): '{\n "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change",\n "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz",\n "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert",\n "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg",\n "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"\n}'
2017-02-23 16:33:36,805:WARNING:certbot.main:Renewal conf file /etc/letsencrypt/renewal/cb17.hr-automation.at.conf is broken. Skipping.
2017-02-23 16:33:36,806:DEBUG:certbot.main:Traceback was:
Traceback (most recent call last):
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 245, in _find_duplicative_certs
candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/storage.py", line 259, in __init__
self._check_symlinks()
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/storage.py", line 267, in _check_symlinks
"expected {0} to be a symlink".format(link))
CertStorageError: expected /etc/letsencrypt/live/cb17.hr-automation.at/cert.pem to be a symlink
2017-02-23 16:33:36,807:WARNING:certbot.main:Renewal conf file /etc/letsencrypt/renewal/dev.hr-automation.eu.conf is broken. Skipping.
2017-02-23 16:33:36,807:DEBUG:certbot.main:Traceback was:
Traceback (most recent call last):
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 245, in _find_duplicative_certs
candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/storage.py", line 259, in __init__
self._check_symlinks()
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/storage.py", line 267, in _check_symlinks
"expected {0} to be a symlink".format(link))
CertStorageError: expected /etc/letsencrypt/live/dev.hr-automation.eu/cert.pem to be a symlink
2017-02-23 16:33:36,807:INFO:certbot.main:Obtaining a new certificate
2017-02-23 16:33:36,808:DEBUG:root:Requesting fresh nonce
2017-02-23 16:33:36,808:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {}
2017-02-23 16:33:37,020:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0
2017-02-23 16:33:37,021:DEBUG:root:Received <Response [405]>. Headers: {'Content-Length': '91', 'Pragma': 'no-cache', 'Boulder-Request-Id': 'VdemYxgAL7fvmALQq62WX_BL_YZxrrL9gTnEWW8Rfvw', 'Expires': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Allow': 'POST', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': '1AVbEYvpePG__-mCCOyEZq5ZyIytaOarER6baBhr53I'}. Content: ''
2017-02-23 16:33:37,022:DEBUG:acme.client:Storing nonce: '\xd4\x05[\x11\x8b\xe9x\xf1\xbf\xff\xe9\x82\x08\xec\x84f\xaeY\xc8\x8c\xadh\xe6\xab\x11\x1e\x9bh\x18k\xe7r'
2017-02-23 16:33:37,022:DEBUG:acme.jose.json_util:Omitted empty fields: status=None, combinations=None, expires=None, challenges=None
2017-02-23 16:33:37,022:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "cb17.hr-automation.at"}, "resource": "new-authz"}
2017-02-23 16:33:37,024:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, jku=None, cty=None, x5t=None, alg=None, x5tS256=None, x5u=None, kid=None, jwk=None
2017-02-23 16:33:37,028:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, jku=None, nonce=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None
2017-02-23 16:33:37,028:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "vsnbIdgtAIpXY7_kVmxH3z4r5VIJ1LBFPONvBUJ5S0coY22OtUHOkZo962Z3h2xidPTaMIGwQGLfnjWhFQ3YJFvStc4I2qr1fnKdBjMyu32NC8seQ4t0BRRsS7TcCv7gPVgqiqvcdeRVmDkbv29Q05ABoCyW_qEW3VQfbqKH5DlxYqFZxXyGXKPpEgfrYyUMFkGNBLz-AmvdvGHPu_nkNpsC28p87_YwA-EZIWi6lvJRIRAk1GBU6vKn5QcJ3n1IKMjgsYJ7-OmefzSuSqtcWeSnjIcTx9AtcuMYYMWudxIvSeWCBdhS5BDzmUJzNLkgU4fIswNmqHKCwnf_zqgT5w"}}, "protected": "eyJub25jZSI6ICIxQVZiRVl2cGVQR19fLW1DQ095RVpxNVp5SXl0YU9hckVSNmJhQmhyNTNJIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJjYjE3LmhyLWF1dG9tYXRpb24uYXQifSwgInJlc291cmNlIjogIm5ldy1hdXRoeiJ9", "signature": "FIilFdyJESoOmfP1-sUeUbtWDNOpIE71UPUvyVbMkpyxVNiYjl7U03tQGlNaWAFNP9bdYGrDz6uNf6oQSAccECLUh0yAiZSojQDPmGFkG_gQ2n1k4XMwO_z9fI6fVH2oMFrHM6hZ53euLbMWD1H99XyT8BbH-uvC-U8D_LztlyhmZ3kk_xGN7virYH3UJ71aI6wbAAnKmMCMk2WviS_xdEn01nYmxulO3zWoWpp18QmfJV9IXHiryrzclfhKe-9XJmC3fO6IDvSkVYoWQpQRPz_QDNg1MvFTWpa9zfz2L_vZQUCdkXXSXYbbuiWFz0hkp5QHqG6IXZ5Y3x-qVounwA"}'}
2017-02-23 16:33:37,252:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 1006
2017-02-23 16:33:37,253:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '1006', 'Expires': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Boulder-Request-Id': 'Ic4uklOxte84LoB9v0XqKQmnxSG1LdUjwGqGymTWzDE', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ', 'Pragma': 'no-cache', 'Boulder-Requester': '8439774', 'Date': 'Thu, 23 Feb 2017 16:33:36 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'GlrQaMNXuW35FCwLGyZq0PdEdTqj5rsK0diHdHNa2j8'}. Content: '{\n "identifier": {\n "type": "dns",\n "value": "cb17.hr-automation.at"\n },\n "status": "pending",\n "expires": "2017-03-02T16:33:36.564780021Z",\n "challenges": [\n {\n "type": "http-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231",\n "token": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM"\n },\n {\n "type": "dns-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254232",\n "token": "Ww4h_ZyYn-b9BqtfA2W14Xu_lD98OB0F8H2bzRFxdX4"\n },\n {\n "type": "tls-sni-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254233",\n "token": "YDrHvsLyvGjb4NRKTLRpILiQO69bL6_81WahT29lkDA"\n }\n ],\n "combinations": [\n [\n 1\n ],\n [\n 2\n ],\n [\n 0\n ]\n ]\n}'
2017-02-23 16:33:37,253:DEBUG:acme.client:Storing nonce: '\x1aZ\xd0h\xc3W\xb9m\xf9\x14,\x0b\x1b&j\xd0\xf7Du:\xa3\xe6\xbb\n\xd1\xd8\x87tsZ\xda?'
2017-02-23 16:33:37,253:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '1006', 'Expires': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Boulder-Request-Id': 'Ic4uklOxte84LoB9v0XqKQmnxSG1LdUjwGqGymTWzDE', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ', 'Pragma': 'no-cache', 'Boulder-Requester': '8439774', 'Date': 'Thu, 23 Feb 2017 16:33:36 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'GlrQaMNXuW35FCwLGyZq0PdEdTqj5rsK0diHdHNa2j8'}): '{\n "identifier": {\n "type": "dns",\n "value": "cb17.hr-automation.at"\n },\n "status": "pending",\n "expires": "2017-03-02T16:33:36.564780021Z",\n "challenges": [\n {\n "type": "http-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231",\n "token": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM"\n },\n {\n "type": "dns-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254232",\n "token": "Ww4h_ZyYn-b9BqtfA2W14Xu_lD98OB0F8H2bzRFxdX4"\n },\n {\n "type": "tls-sni-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254233",\n "token": "YDrHvsLyvGjb4NRKTLRpILiQO69bL6_81WahT29lkDA"\n }\n ],\n "combinations": [\n [\n 1\n ],\n [\n 2\n ],\n [\n 0\n ]\n ]\n}'
2017-02-23 16:33:37,255:INFO:certbot.auth_handler:Performing the following challenges:
2017-02-23 16:33:37,255:INFO:certbot.auth_handler:http-01 challenge for cb17.hr-automation.at
2017-02-23 16:33:37,256:INFO:certbot.plugins.webroot:Using the webroot path /var/www/virtual/LetsEncrypt for all unmatched domains.
2017-02-23 16:33:37,256:DEBUG:certbot.plugins.webroot:Creating root challenges validation dir at /var/www/virtual/LetsEncrypt/.well-known/acme-challenge
2017-02-23 16:33:37,261:DEBUG:certbot.plugins.webroot:Attempting to save validation to /var/www/virtual/LetsEncrypt/.well-known/acme-challenge/TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM
2017-02-23 16:33:37,261:INFO:certbot.auth_handler:Waiting for verification...
2017-02-23 16:33:37,262:DEBUG:acme.client:Serialized JSON: {"keyAuthorization": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM.4X4LBhyRvHGsscJ9-6T6E5ifmZk9NJg6R5J8Rh4zRLs", "type": "http-01", "resource": "challenge"}
2017-02-23 16:33:37,263:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, jku=None, cty=None, x5t=None, alg=None, x5tS256=None, x5u=None, kid=None, jwk=None
2017-02-23 16:33:37,266:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, jku=None, nonce=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None
2017-02-23 16:33:37,266:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "vsnbIdgtAIpXY7_kVmxH3z4r5VIJ1LBFPONvBUJ5S0coY22OtUHOkZo962Z3h2xidPTaMIGwQGLfnjWhFQ3YJFvStc4I2qr1fnKdBjMyu32NC8seQ4t0BRRsS7TcCv7gPVgqiqvcdeRVmDkbv29Q05ABoCyW_qEW3VQfbqKH5DlxYqFZxXyGXKPpEgfrYyUMFkGNBLz-AmvdvGHPu_nkNpsC28p87_YwA-EZIWi6lvJRIRAk1GBU6vKn5QcJ3n1IKMjgsYJ7-OmefzSuSqtcWeSnjIcTx9AtcuMYYMWudxIvSeWCBdhS5BDzmUJzNLkgU4fIswNmqHKCwnf_zqgT5w"}}, "protected": "eyJub25jZSI6ICJHbHJRYU1OWHVXMzVGQ3dMR3lacTBQZEVkVHFqNXJzSzBkaUhkSE5hMmo4In0", "payload": "eyJrZXlBdXRob3JpemF0aW9uIjogIlRSMF9HNjZqUy1NdU1SY1dLZ2JtM3JiVlJqeW54cGxXbDJGUFZNVGRHUk0uNFg0TEJoeVJ2SEdzc2NKOS02VDZFNWlmbVprOU5KZzZSNUo4Umg0elJMcyIsICJ0eXBlIjogImh0dHAtMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0", "signature": "iQND3sdvaAuY2TRMzb6CjhLqXx69RPYHkJaur8xy73sNTCJnEc2apaZneKWEVE9g1ZvB8JtosXetERkSGkwxi5QTLO9zx1GjUv71KfO0WZI96oU6w7aUsUft8uSX3ennG7sDgHdZlfKUjbubtK9F9dGWStP6S8oKkrpcaqHYsC-6zVaXHXu9XvwQ-STNDWp1BFwXfZ2BkyvoTDnB96d3mdsF0hQvLoKqLTmeEMF7Xry0U-AXal12_ZocsUjOGzfU6FhU_2R1xfCG7HKbb06LxPmPVjAJ772OjKhsRzCDuENOzPfc5tiygnyzJMkX5zyMAJBn3imX46HXrPxUd1FaRw"}'}
2017-02-23 16:33:37,491:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231 HTTP/1.1" 202 335
2017-02-23 16:33:37,492:DEBUG:root:Received <Response [202]>. Headers: {'Content-Length': '335', 'Boulder-Request-Id': 'lk63lfMxGZJ-zHQEGypR5OBCm-fsbI2p7PtjTlXn0gc', 'Expires': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231', 'Pragma': 'no-cache', 'Boulder-Requester': '8439774', 'Date': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'm8yxmQJ6XB1gUfW-m9of_cUVVbM1QTUVlpiBCICH-jY'}. Content: '{\n "type": "http-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231",\n "token": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM",\n "keyAuthorization": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM.4X4LBhyRvHGsscJ9-6T6E5ifmZk9NJg6R5J8Rh4zRLs"\n}'
2017-02-23 16:33:37,492:DEBUG:acme.client:Storing nonce: '\x9b\xcc\xb1\x99\x02z\\\x1d`Q\xf5\xbe\x9b\xda\x1f\xfd\xc5\x15U\xb35A5\x15\x96\x98\x81\x08\x80\x87\xfa6'
2017-02-23 16:33:37,492:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '335', 'Boulder-Request-Id': 'lk63lfMxGZJ-zHQEGypR5OBCm-fsbI2p7PtjTlXn0gc', 'Expires': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231', 'Pragma': 'no-cache', 'Boulder-Requester': '8439774', 'Date': 'Thu, 23 Feb 2017 16:33:36 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'm8yxmQJ6XB1gUfW-m9of_cUVVbM1QTUVlpiBCICH-jY'}): '{\n "type": "http-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231",\n "token": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM",\n "keyAuthorization": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM.4X4LBhyRvHGsscJ9-6T6E5ifmZk9NJg6R5J8Rh4zRLs"\n}'
2017-02-23 16:33:40,496:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ. args: (), kwargs: {}
2017-02-23 16:33:40,727:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ HTTP/1.1" 200 1870
2017-02-23 16:33:40,728:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1870', 'Expires': 'Thu, 23 Feb 2017 16:33:40 GMT', 'Boulder-Request-Id': '8lsl9sDHhKpQvNBdOlCWkjTFdMJa7EJ59vgSkCR6vrw', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 23 Feb 2017 16:33:40 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'SW3iO7WWTzLCvcVqS4c8qJdb8eS9JE6tKVV4bSHZHaY'}. Content: '{\n "identifier": {\n "type": "dns",\n "value": "cb17.hr-automation.at"\n },\n "status": "invalid",\n "expires": "2017-03-02T16:33:36Z",\n "challenges": [\n {\n "type": "http-01",\n "status": "invalid",\n "error": {\n "type": "urn:acme:error:unauthorized",\n "detail": "Invalid response from http://cb17.hr-automation.at/.well-known/acme-challenge/TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM: \\"\\u003c!DOCTYPE html PUBLIC \\"-//W3C//DTD XHTML 1.1//EN\\"\\n \\"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd\\"\\u003e\\n\\u003chtml xmlns=\\"http://ww\\"",\n "status": 403\n },\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231",\n "token": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM",\n "keyAuthorization": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM.4X4LBhyRvHGsscJ9-6T6E5ifmZk9NJg6R5J8Rh4zRLs",\n "validationRecord": [\n {\n "url": "http://cb17.hr-automation.at/.well-known/acme-challenge/TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM",\n "hostname": "cb17.hr-automation.at",\n "port": "80",\n "addressesResolved": [\n "51.254.155.99"\n ],\n "addressUsed": "51.254.155.99"\n }\n ]\n },\n {\n "type": "dns-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254232",\n "token": "Ww4h_ZyYn-b9BqtfA2W14Xu_lD98OB0F8H2bzRFxdX4"\n },\n {\n "type": "tls-sni-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254233",\n "token": "YDrHvsLyvGjb4NRKTLRpILiQO69bL6_81WahT29lkDA"\n }\n ],\n "combinations": [\n [\n 1\n ],\n [\n 2\n ],\n [\n 0\n ]\n ]\n}'
2017-02-23 16:33:40,729:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '1870', 'Expires': 'Thu, 23 Feb 2017 16:33:40 GMT', 'Boulder-Request-Id': '8lsl9sDHhKpQvNBdOlCWkjTFdMJa7EJ59vgSkCR6vrw', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 23 Feb 2017 16:33:40 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'SW3iO7WWTzLCvcVqS4c8qJdb8eS9JE6tKVV4bSHZHaY'}): '{\n "identifier": {\n "type": "dns",\n "value": "cb17.hr-automation.at"\n },\n "status": "invalid",\n "expires": "2017-03-02T16:33:36Z",\n "challenges": [\n {\n "type": "http-01",\n "status": "invalid",\n "error": {\n "type": "urn:acme:error:unauthorized",\n "detail": "Invalid response from http://cb17.hr-automation.at/.well-known/acme-challenge/TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM: \\"\\u003c!DOCTYPE html PUBLIC \\"-//W3C//DTD XHTML 1.1//EN\\"\\n \\"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd\\"\\u003e\\n\\u003chtml xmlns=\\"http://ww\\"",\n "status": 403\n },\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254231",\n "token": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM",\n "keyAuthorization": "TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM.4X4LBhyRvHGsscJ9-6T6E5ifmZk9NJg6R5J8Rh4zRLs",\n "validationRecord": [\n {\n "url": "http://cb17.hr-automation.at/.well-known/acme-challenge/TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM",\n "hostname": "cb17.hr-automation.at",\n "port": "80",\n "addressesResolved": [\n "51.254.155.99"\n ],\n "addressUsed": "51.254.155.99"\n }\n ]\n },\n {\n "type": "dns-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254232",\n "token": "Ww4h_ZyYn-b9BqtfA2W14Xu_lD98OB0F8H2bzRFxdX4"\n },\n {\n "type": "tls-sni-01",\n "status": "pending",\n "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/3jKbXOcgDdHRNgjNgJgAtkgyJ_uSsllWe4PBSmirwRQ/695254233",\n "token": "YDrHvsLyvGjb4NRKTLRpILiQO69bL6_81WahT29lkDA"\n }\n ],\n "combinations": [\n [\n 1\n ],\n [\n 2\n ],\n [\n 0\n ]\n ]\n}'
2017-02-23 16:33:40,730:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:
Domain: cb17.hr-automation.at
Type: unauthorized
Detail: Invalid response from http://cb17.hr-automation.at/.well-known/acme-challenge/TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM: "<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://ww"
To fix these errors, please make sure that your domain name was entered correctly and the DNS A record(s) for that domain contain(s) the right IP address.
2017-02-23 16:33:40,731:INFO:certbot.auth_handler:Cleaning up challenges
2017-02-23 16:33:40,731:DEBUG:certbot.plugins.webroot:Removing /var/www/virtual/LetsEncrypt/.well-known/acme-challenge/TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM
2017-02-23 16:33:40,731:DEBUG:certbot.plugins.webroot:All challenges cleaned up, removing /var/www/virtual/LetsEncrypt/.well-known/acme-challenge
2017-02-23 16:33:40,732:DEBUG:certbot.main:Exiting abnormally:
Traceback (most recent call last):
File "/root/.local/share/letsencrypt/bin/letsencrypt", line 11, in <module>
sys.exit(main())
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 776, in main
return config.func(config, plugins)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 563, in obtain_cert
action, _ = _auth_from_domains(le_client, config, domains, lineage)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 100, in _auth_from_domains
lineage = le_client.obtain_and_enroll_certificate(domains)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/client.py", line 281, in obtain_and_enroll_certificate
certr, chain, key, _ = self.obtain_certificate(domains)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/client.py", line 253, in obtain_certificate
self.config.allow_subset_of_names)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/auth_handler.py", line 78, in get_authorizations
self._respond(resp, best_effort)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/auth_handler.py", line 135, in _respond
self._poll_challenges(chall_update, best_effort)
File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/auth_handler.py", line 199, in _poll_challenges
raise errors.FailedChallenges(all_failed_achalls)
FailedChallenges: Failed authorization procedure. cb17.hr-automation.at (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://cb17.hr-automation.at/.well-known/acme-challenge/TR0_G66jS-MuMRcWKgbm3rbVRjynxplWl2FPVMTdGRM: "<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://ww"

Display More

How can i solve the problem? Thank you very much.

**Nuxwin** · Feb 23rd 2017

@FloRet88

Quote from FloRet88

we changed to a new server, but after manual migrating i get following error on activating SSL for domains.

For the cb17.hr-automation.at and dev.hr-automation.eu SSL lineages, and according the logs, it appears that you copied the /etc/letsencrypt directory in a wrong way. Symlinks were replaced by their targets and Certbot client is not happy...

For the rest, they are auth failures due to DNS issues or the Apache2 alias to /var/www/virtual/LetsEncrypt/.well-known/acme-challenge is broken.

If you cannot figure out alone, give us access to the server (root access and panel admin access).

**FloRet88** · Feb 23rd 2017

Hello @Nuxwin

Ok thanks for Info, i didn't See that the DNS Records Are still in progress!

Best regards

Let´s Encrypt conf file broken?

Share

Similar Threads

I-MSCP and rspamd

Daily visitors