2024-11-13 16:39:18,911:DEBUG:certbot._internal.main:certbot version: 2.11.0 2024-11-13 16:39:18,911:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/local/bin/certbot 2024-11-13 16:39:18,911:DEBUG:certbot._internal.main:Arguments: ['--webroot', '--webroot-path=/usr/share/nginx/html/letsencrypt', '--email', 'najia@slc-assurances.fr', '--agree-tos', '--no-eff-email', '-d', 'comparateur.slc-assurances.fr', '-d', 'scraping.slassurances.fr'] 2024-11-13 16:39:18,912:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2024-11-13 16:39:18,931:DEBUG:certbot._internal.log:Root logging level set at 30 2024-11-13 16:39:18,932:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None 2024-11-13 16:39:18,932:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A seperate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported). Interfaces: Authenticator, Plugin Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins') Initialized: Prep: True 2024-11-13 16:39:18,932:DEBUG:certbot._internal.plugins.selection:Selected authenticator and installer None 2024-11-13 16:39:18,933:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None 2024-11-13 16:39:19,005:DEBUG:certbot._internal.main:Picked account: ), creation_host='d75572c010e1', register_to_eff=None))> 2024-11-13 16:39:19,006:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory. 2024-11-13 16:39:19,008:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443 2024-11-13 16:39:23,479:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 746 2024-11-13 16:39:23,481:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 13 Nov 2024 16:39:23 GMT Content-Type: application/json Content-Length: 746 Connection: keep-alive Cache-Control: public, max-age=0, no-cache X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "fAHNAO5n5cQ": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-03/renewalInfo", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" } 2024-11-13 16:40:13,636:DEBUG:certbot._internal.display.obj:Notifying user: Renewing an existing certificate for comparateur.slc-assurances.fr and scraping.slassurances.fr 2024-11-13 16:40:13,673:DEBUG:acme.client:Requesting fresh nonce 2024-11-13 16:40:13,674:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce. 2024-11-13 16:40:13,824:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0 2024-11-13 16:40:13,825:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 13 Nov 2024 16:40:13 GMT Connection: keep-alive Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: SHEOpopMH45deD_MkZLcYXaKRopTj2AHYa-9rzhRhi82PpXMbS8 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 2024-11-13 16:40:13,826:DEBUG:acme.client:Storing nonce: SHEOpopMH45deD_MkZLcYXaKRopTj2AHYa-9rzhRhi82PpXMbS8 2024-11-13 16:40:13,826:DEBUG:acme.client:JWS payload: b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "comparateur.slc-assurances.fr"\n },\n {\n "type": "dns",\n "value": "scraping.slassurances.fr"\n }\n ]\n}' 2024-11-13 16:40:13,832:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTY3MzQwNTEwNyIsICJub25jZSI6ICJTSEVPcG9wTUg0NWRlRF9Na1pMY1lYYUtSb3BUajJBSFlhLTlyemhSaGk4MlBwWE1iUzgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9", "signature": "depFPFJb3u1U_zl5v0Du_bGygYNY5sP81aZWjF1kPypygmhcjPGSfb_Ll159cXDleCF1KSuxvxQAM6Ql8cobvukqrxOnp5NGdeqgLdtDaRr3TWuOrRRfXs6RIJArKgCROTqCpkts6OYEUb0FVE_ZAAz_1iOhy4fuM9UILDDNlTRHa-PhhVOTfSMb6hXuZppKjs4WYDJmRbadq2VTBN_7KM0VlCyoTt5lvzq4oFF6VMtrciZdoC7prpRaTvOA-6EW29hDl2WKh73yPYPVGalTP9hTXCK_YVwzQNWxFZkUMk--hFpRR0-WaPhtoCL5h27HPdf8oUf4nlY_-IICpJOTrQ", "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogImNvbXBhcmF0ZXVyLnNsYy1hc3N1cmFuY2VzLmZyIgogICAgfSwKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogInNjcmFwaW5nLnNsYXNzdXJhbmNlcy5mciIKICAgIH0KICBdCn0" } 2024-11-13 16:40:14,022:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 502 2024-11-13 16:40:14,023:DEBUG:acme.client:Received response: HTTP 201 Server: nginx Date: Wed, 13 Nov 2024 16:40:13 GMT Content-Type: application/json Content-Length: 502 Connection: keep-alive Boulder-Requester: 1673405107 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Location: https://acme-v02.api.letsencrypt.org/acme/order/1673405107/322766965797 Replay-Nonce: SHEOpopMksrikYPxnzsx6VunS-EFbOxn-KoHkVI5ml50j-7IK6I X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "status": "pending", "expires": "2024-11-20T16:40:13Z", "identifiers": [ { "type": "dns", "value": "comparateur.slc-assurances.fr" }, { "type": "dns", "value": "scraping.slassurances.fr" } ], "authorizations": [ "https://acme-v02.api.letsencrypt.org/acme/authz-v3/429640015037", "https://acme-v02.api.letsencrypt.org/acme/authz-v3/429640015047" ], "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/1673405107/322766965797" } 2024-11-13 16:40:14,023:DEBUG:acme.client:Storing nonce: SHEOpopMksrikYPxnzsx6VunS-EFbOxn-KoHkVI5ml50j-7IK6I 2024-11-13 16:40:14,024:DEBUG:acme.client:JWS payload: b'' 2024-11-13 16:40:14,028:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/429640015037: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTY3MzQwNTEwNyIsICJub25jZSI6ICJTSEVPcG9wTWtzcmlrWVB4bnpzeDZWdW5TLUVGYk94bi1Lb0hrVkk1bWw1MGotN0lLNkkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzQyOTY0MDAxNTAzNyJ9", "signature": "JEmG2CrJi7UjzsHRxLGgd7NI22AKFXY5VLTnhorV1N0mR7kcUqZYaVR3hnmWvKlmP_QEiECudiio3Pq_cp3r5xNErb-se6homp5QI-C76uXpOHjRdhdz8bmP3ftWMwIAQKv6vX44mSvaWcTmpDtaCjaIHwaTScRY_zwwjpsWfuFEDS8JGf9AJEp36b1KYMijW46Ja2aDwosEh46_YluO3neeVnsIwkpngF3unmcb5PlunpNd_Hd0y4zNUTQu5S12eEudyLDyqoPfEJlDDQaC_fi5b9W9Kk4q-bautcOcOatfWSUBzrZcrnMjgzbTS30L6bmPiYBxdt5ojywCIjIWdA", "payload": "" } 2024-11-13 16:40:14,184:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/429640015037 HTTP/1.1" 200 813 2024-11-13 16:40:14,186:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 13 Nov 2024 16:40:14 GMT Content-Type: application/json Content-Length: 813 Connection: keep-alive Boulder-Requester: 1673405107 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: SHEOpopMEG1NK5Bl4sRkvC9iFOgJ8YZLsps1q-eSm9Wgh3S47Uk X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "comparateur.slc-assurances.fr" }, "status": "pending", "expires": "2024-11-20T16:40:13Z", "challenges": [ { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015037/CLMg6Q", "status": "pending", "token": "zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU" }, { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015037/i3FsSw", "status": "pending", "token": "zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015037/zHRxPA", "status": "pending", "token": "zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU" } ] } 2024-11-13 16:40:14,186:DEBUG:acme.client:Storing nonce: SHEOpopMEG1NK5Bl4sRkvC9iFOgJ8YZLsps1q-eSm9Wgh3S47Uk 2024-11-13 16:40:14,187:DEBUG:acme.client:JWS payload: b'' 2024-11-13 16:40:14,190:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/429640015047: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTY3MzQwNTEwNyIsICJub25jZSI6ICJTSEVPcG9wTUVHMU5LNUJsNHNSa3ZDOWlGT2dKOFlaTHNwczFxLWVTbTlXZ2gzUzQ3VWsiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzQyOTY0MDAxNTA0NyJ9", "signature": "VSjyMyiSQ0_Q5LBq6cv_4ArScoKAjklCeARwa8Toxgc7qESDY3FW7NgSxQ2TUaG0YrzEnUBaeFN7gUav3SHG2zo6JLNfIg5NA-OySH8EZi8XGsJ4ukcjkr90ijwiX3cZzKg8jC-AjxQtQl9sRZ2-QvGqlWwG4YlmhunWYqiAjO3p0qk3wRqSOgqDTsCyQQ2hvwt6mx1D03KoW6Dc9cgh9B7vDaCZtu0GJ3XsjKWx-E86oqbT3AebDaRo3xP-YYsI-EGXgd54VXRa1bVLpqsgvV5pf1bpeyBruXLZU9rjYydhGHDgW_ECScVNxuiHTfHRXsPebiw2FlWMmlMI1-1xZg", "payload": "" } 2024-11-13 16:40:14,346:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/429640015047 HTTP/1.1" 200 808 2024-11-13 16:40:14,347:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 13 Nov 2024 16:40:14 GMT Content-Type: application/json Content-Length: 808 Connection: keep-alive Boulder-Requester: 1673405107 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: aHUr_lcV4pWKJzAkl0KtVbs-YthUnzfD4OBJ2igv6fo5zj1i1pY X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "scraping.slassurances.fr" }, "status": "pending", "expires": "2024-11-20T16:40:13Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015047/vKSJ4w", "status": "pending", "token": "PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E" }, { "type": "tls-alpn-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015047/RItTFw", "status": "pending", "token": "PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E" }, { "type": "dns-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015047/DMbKBQ", "status": "pending", "token": "PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E" } ] } 2024-11-13 16:40:14,348:DEBUG:acme.client:Storing nonce: aHUr_lcV4pWKJzAkl0KtVbs-YthUnzfD4OBJ2igv6fo5zj1i1pY 2024-11-13 16:40:14,349:INFO:certbot._internal.auth_handler:Performing the following challenges: 2024-11-13 16:40:14,350:INFO:certbot._internal.auth_handler:http-01 challenge for comparateur.slc-assurances.fr 2024-11-13 16:40:14,350:INFO:certbot._internal.auth_handler:http-01 challenge for scraping.slassurances.fr 2024-11-13 16:40:14,350:INFO:certbot._internal.plugins.webroot:Using the webroot path /usr/share/nginx/html/letsencrypt for all unmatched domains. 2024-11-13 16:40:14,351:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /usr/share/nginx/html/letsencrypt/.well-known/acme-challenge 2024-11-13 16:40:14,352:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /usr/share/nginx/html/letsencrypt/.well-known/acme-challenge 2024-11-13 16:40:14,354:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /usr/share/nginx/html/letsencrypt/.well-known/acme-challenge/zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU 2024-11-13 16:40:14,356:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /usr/share/nginx/html/letsencrypt/.well-known/acme-challenge/PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E 2024-11-13 16:40:14,356:DEBUG:acme.client:JWS payload: b'{}' 2024-11-13 16:40:14,358:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015037/i3FsSw: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTY3MzQwNTEwNyIsICJub25jZSI6ICJhSFVyX2xjVjRwV0tKekFrbDBLdFZicy1ZdGhVbnpmRDRPQkoyaWd2NmZvNXpqMWkxcFkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLXYzLzQyOTY0MDAxNTAzNy9pM0ZzU3cifQ", "signature": "pzOJSyzh7lxD1YW7DCedfsOcqpNJF-FcGOVZ--a5UBR4LOJo5qydInOZRCB24ovax2FlrcztJj6SMebxY4niTWjSdOp6JHFpk-7dIoZx_kKh7O1Hov5KF64SP6VD8psE_H6bR6XBSzypEIc9T8ijWHlUqAbkE-0sJTNHv0m0QVWHrZDcYLcJA0ec9epusHDptOKxdv5XFKSfv9c68ix76q9sj_bOS0oP__NbMv62cgGVlTmMZ8rF4XSbHOMafvsTceCKlda06gmvYV28ohlX7Wf2LVjFBy2om39CCTywEhf6LQs4tYtBLDraKM0XUm3gXfQNxWpjdsZwxDJL1ROVJQ", "payload": "e30" } 2024-11-13 16:40:14,513:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/429640015037/i3FsSw HTTP/1.1" 200 187 2024-11-13 16:40:14,514:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 13 Nov 2024 16:40:14 GMT Content-Type: application/json Content-Length: 187 Connection: keep-alive Boulder-Requester: 1673405107 Cache-Control: public, max-age=0, no-cache Link: ;rel="index", ;rel="up" Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015037/i3FsSw Replay-Nonce: SHEOpopMOIWK3LAZTnMnapGQpWDx75CYtXvvhayRZ1AEAsi0LBY X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015037/i3FsSw", "status": "pending", "token": "zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU" } 2024-11-13 16:40:14,515:DEBUG:acme.client:Storing nonce: SHEOpopMOIWK3LAZTnMnapGQpWDx75CYtXvvhayRZ1AEAsi0LBY 2024-11-13 16:40:14,516:DEBUG:acme.client:JWS payload: b'{}' 2024-11-13 16:40:14,520:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015047/vKSJ4w: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTY3MzQwNTEwNyIsICJub25jZSI6ICJTSEVPcG9wTU9JV0szTEFaVG5NbmFwR1FwV0R4NzVDWXRYdnZoYXlSWjFBRUFzaTBMQlkiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLXYzLzQyOTY0MDAxNTA0Ny92S1NKNHcifQ", "signature": "Znd_kZcW4qfODYJUcz-Fljrj_CmLGhO_4CdWBw1L9xmZKduiCxIpgPe8Odwp2iZonsUt_BaqdWwTxPHi9NdJIrLwBxbgoNFpyQtiTljC4NSDr8gISAxs0A_qcaSZ0F79lM8BFMvdkJgHXBrSITVN8PSw_-gAmgGdFQzpIfnN-mdk3Jq7UL_UONmg1DgYGRK6C0eYeDO5vPD02KntvRExTp13URrWDMEm2xDc5Ld0A9KFtTduo5DmyWhax8NRkSgqYYlvHzKzebx5RHZKyHDlhW_J2R3Gy1chceSNJqTIRn3Q95n59UgZSe0kWpNXUqH9NekC5OIyAsK59AH4FIek2A", "payload": "e30" } 2024-11-13 16:40:14,678:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/429640015047/vKSJ4w HTTP/1.1" 200 187 2024-11-13 16:40:14,680:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 13 Nov 2024 16:40:14 GMT Content-Type: application/json Content-Length: 187 Connection: keep-alive Boulder-Requester: 1673405107 Cache-Control: public, max-age=0, no-cache Link: ;rel="index", ;rel="up" Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015047/vKSJ4w Replay-Nonce: aHUr_lcVphtPuy0j9wp9N0CyzpiXEflW1Ve7WGQ0HKvzLn1KvPU X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015047/vKSJ4w", "status": "pending", "token": "PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E" } 2024-11-13 16:40:14,680:DEBUG:acme.client:Storing nonce: aHUr_lcVphtPuy0j9wp9N0CyzpiXEflW1Ve7WGQ0HKvzLn1KvPU 2024-11-13 16:40:14,681:INFO:certbot._internal.auth_handler:Waiting for verification... 2024-11-13 16:40:15,681:DEBUG:acme.client:JWS payload: b'' 2024-11-13 16:40:15,686:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/429640015037: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTY3MzQwNTEwNyIsICJub25jZSI6ICJhSFVyX2xjVnBodFB1eTBqOXdwOU4wQ3l6cGlYRWZsVzFWZTdXR1EwSEt2ekxuMUt2UFUiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzQyOTY0MDAxNTAzNyJ9", "signature": "o7cbtl4pWbXw0iLZdqvwcNdYEj0LpzkE40f1o_p9OAPGiJgChYjbfDOdYOfvQn6visRfz8SC4XR8bpk2jv6eJjexgmARuYMohfAPjDvhlPZxUlor7GWXnYra5TvGbutj_NVf1fwVH1AdBzrMa6JyA7kSyqwvRVk6IV_QG3Znrmo6maQCIhPEFTjjP7s9CD194CHu93fraM2TkJJZ8nrqLxvK75nH6_puz4JNDYQOYPQLyyRiwljajNjS01tgvIN4Es7JMPqMZBxxzeMgyov5nwLx_lbIYcSqQAu44friHumDhIoFuQVS9JWRDLVHyJZ-NEyWLtXrq7BhGGtuwA_rMw", "payload": "" } 2024-11-13 16:40:15,841:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/429640015037 HTTP/1.1" 200 1084 2024-11-13 16:40:15,842:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 13 Nov 2024 16:40:15 GMT Content-Type: application/json Content-Length: 1084 Connection: keep-alive Boulder-Requester: 1673405107 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: aHUr_lcViado7q0ODhwMxjkJ1M-AaqLAe2irpw_p9qW0RvSeNls X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "comparateur.slc-assurances.fr" }, "status": "invalid", "expires": "2024-11-20T16:40:13Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015037/i3FsSw", "status": "invalid", "validated": "2024-11-13T16:40:14Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "51.255.71.144: Fetching http://comparateur.slc-assurances.fr/.well-known/acme-challenge/zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU: Connection refused", "status": 400 }, "token": "zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU", "validationRecord": [ { "url": "http://comparateur.slc-assurances.fr/.well-known/acme-challenge/zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU", "hostname": "comparateur.slc-assurances.fr", "port": "80", "addressesResolved": [ "51.255.71.144" ], "addressUsed": "51.255.71.144" } ] } ] } 2024-11-13 16:40:15,842:DEBUG:acme.client:Storing nonce: aHUr_lcViado7q0ODhwMxjkJ1M-AaqLAe2irpw_p9qW0RvSeNls 2024-11-13 16:40:15,843:DEBUG:acme.client:JWS payload: b'' 2024-11-13 16:40:15,847:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/429640015047: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTY3MzQwNTEwNyIsICJub25jZSI6ICJhSFVyX2xjVmlhZG83cTBPRGh3TXhqa0oxTS1BYXFMQWUyaXJwd19wOXFXMFJ2U2VObHMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzQyOTY0MDAxNTA0NyJ9", "signature": "LOPqf0_GJ_TQhsrHdl6WuMfYOiAecnlrXbSe5uom6Oe-wCYKBvcnWwRVL9HUfQkl3rszSFysnNmTyzNsnIe0BllTbCbdikp78uFw4i7uH9lfXSH2NOVNtmYI8uVp172Hd8NiDW3yn7yxrfI7DBsVQdkT1Jbwxx9MmRIjsJF7QPPFBU87JRuhdUb1os_crCuYyR9LIl-5l4mXOb07j1PeXvL3ibZGIbPByBCIALJ9_AdEsP7Dgw4BhxiPDV5OofftftnSTYOAZxGF3P6pfRy6rrWdR7VipvPK4S7ygO7WFekYBUxnuXOR92uN0WQO71smGCVXUqV0utBILti4sDngew", "payload": "" } 2024-11-13 16:40:16,000:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/429640015047 HTTP/1.1" 200 1064 2024-11-13 16:40:16,001:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Wed, 13 Nov 2024 16:40:15 GMT Content-Type: application/json Content-Length: 1064 Connection: keep-alive Boulder-Requester: 1673405107 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: SHEOpopMso587fG5rN-if7x16nLahnJYcNrTjbqppzMisrWIFvc X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "scraping.slassurances.fr" }, "status": "invalid", "expires": "2024-11-20T16:40:13Z", "challenges": [ { "type": "http-01", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/429640015047/vKSJ4w", "status": "invalid", "validated": "2024-11-13T16:40:14Z", "error": { "type": "urn:ietf:params:acme:error:connection", "detail": "51.255.71.144: Fetching http://scraping.slassurances.fr/.well-known/acme-challenge/PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E: Connection refused", "status": 400 }, "token": "PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E", "validationRecord": [ { "url": "http://scraping.slassurances.fr/.well-known/acme-challenge/PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E", "hostname": "scraping.slassurances.fr", "port": "80", "addressesResolved": [ "51.255.71.144" ], "addressUsed": "51.255.71.144" } ] } ] } 2024-11-13 16:40:16,001:DEBUG:acme.client:Storing nonce: SHEOpopMso587fG5rN-if7x16nLahnJYcNrTjbqppzMisrWIFvc 2024-11-13 16:40:16,002:INFO:certbot._internal.auth_handler:Challenge failed for domain comparateur.slc-assurances.fr 2024-11-13 16:40:16,002:INFO:certbot._internal.auth_handler:Challenge failed for domain scraping.slassurances.fr 2024-11-13 16:40:16,003:INFO:certbot._internal.auth_handler:http-01 challenge for comparateur.slc-assurances.fr 2024-11-13 16:40:16,003:INFO:certbot._internal.auth_handler:http-01 challenge for scraping.slassurances.fr 2024-11-13 16:40:16,003:DEBUG:certbot._internal.display.obj:Notifying user: Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems: Domain: comparateur.slc-assurances.fr Type: connection Detail: 51.255.71.144: Fetching http://comparateur.slc-assurances.fr/.well-known/acme-challenge/zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU: Connection refused Domain: scraping.slassurances.fr Type: connection Detail: 51.255.71.144: Fetching http://scraping.slassurances.fr/.well-known/acme-challenge/PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E: Connection refused Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet. 2024-11-13 16:40:16,006:DEBUG:certbot._internal.error_handler:Encountered exception: Traceback (most recent call last): File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 108, in handle_authorizations self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort) File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2024-11-13 16:40:16,006:DEBUG:certbot._internal.error_handler:Calling registered functions 2024-11-13 16:40:16,006:INFO:certbot._internal.auth_handler:Cleaning up challenges 2024-11-13 16:40:16,007:DEBUG:certbot._internal.plugins.webroot:Removing /usr/share/nginx/html/letsencrypt/.well-known/acme-challenge/zbEtR2XWERjwIyaYQSlRSdazLKXOfPmqQNQdrFcc4eU 2024-11-13 16:40:16,007:DEBUG:certbot._internal.plugins.webroot:Removing /usr/share/nginx/html/letsencrypt/.well-known/acme-challenge/PbK_cl6prPT9qUnQ2gILzJAnunVBFuk74qFNK6oRL-E 2024-11-13 16:40:16,008:DEBUG:certbot._internal.plugins.webroot:All challenges cleaned up 2024-11-13 16:40:16,008:DEBUG:certbot._internal.log:Exiting abnormally: Traceback (most recent call last): File "/usr/local/bin/certbot", line 33, in sys.exit(load_entry_point('certbot', 'console_scripts', 'certbot')()) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/certbot/src/certbot/certbot/main.py", line 19, in main return internal_main.main(cli_args) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/certbot/src/certbot/certbot/_internal/main.py", line 1894, in main return config.func(config, plugins) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/certbot/src/certbot/certbot/_internal/main.py", line 1600, in certonly lineage = _get_and_save_cert(le_client, config, domains, certname, lineage) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/certbot/src/certbot/certbot/_internal/main.py", line 131, in _get_and_save_cert renewal.renew_cert(config, domains, le_client, lineage) File "/opt/certbot/src/certbot/certbot/_internal/renewal.py", line 399, in renew_cert new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/certbot/src/certbot/certbot/_internal/client.py", line 428, in obtain_certificate orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/certbot/src/certbot/certbot/_internal/client.py", line 496, in _get_order_and_authorizations authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 108, in handle_authorizations self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort) File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations raise errors.AuthorizationError('Some challenges have failed.') certbot.errors.AuthorizationError: Some challenges have failed. 2024-11-13 16:40:16,013:ERROR:certbot._internal.log:Some challenges have failed.