Почему не обновляется сертификат?

Question

[nuclear_kote]

sudo certbot renew --dry-run
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/mydomain.ru.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for mydomain.ru
Waiting for verification...
Challenge failed for domain mydomain.ru
http-01 challenge for mydomain.ru
Cleaning up challenges
Attempting to renew cert (mydomain.ru) from /etc/letsencrypt/renewal/mydomain.ru.conf produced an unexpected error: Some challenges have failed.. Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/mydomain.ru/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
** DRY RUN: simulating 'certbot renew' close to cert expiry
**          (The test certificates below have not been saved.)

All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/mydomain.ru/fullchain.pem (failure)
** DRY RUN: simulating 'certbot renew' close to cert expiry
**          (The test certificates above have not been saved.)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: mydomain.ru
   Type:   connection
   Detail: Fetching
   http://mydomain.ru/.well-known/acme-challenge/_Sp2hyssssssDmbziNT5qwVPvXTqMOpnz9AL0:
   Connection refused

я так понимаю ему надо куда то прописать путь куда класть этот _Sp2hyssssssDmbziNT5qwVPvXTqMOpnz9AL0

Answer 1

[ky0]

Если подтверждаете владение домена через HTTP, нужно добавить в блок, отвечающий за обработку запросов к вашему домену на 80 порту нечто подобное:

location /.well-known/acme-challenge {
                root /var/www/letsencrypt;
        }

Каталог, в который будет класться челлендж-файл, настраивается у Certbot`а директивой -w /var/www/letsencrypt

З.Ы. - заметил, что вы не указали, какой у вас веб-сервер. Мой пример релевантен для нгинкса.