From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id iIiQBInSXmWvAgAA9RJhRA:P1 (envelope-from ) for ; Thu, 23 Nov 2023 05:18:17 +0100 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id iIiQBInSXmWvAgAA9RJhRA (envelope-from ) for ; Thu, 23 Nov 2023 05:18:17 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 9F334140B8 for ; Thu, 23 Nov 2023 05:18:16 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=CqFORko0; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1700713097; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=hc3dSbjjqYAcRLE0tYs+zumi+3FWD86aPUn2Nkd1muU=; b=kJ7qK+lRDhl8AXShM8izYw95UQFNsvdHu12s2veie6XlcRATp6IiWF37eX30hs4WowHB3j gS06Bsjgb4/trtib4Veq23jR1WQdAHUspaJfqWFpgJdcZ0mji5ctwlucmmbjCmZrJ+fKQ0 9ltLiRIcwvJXpHxxD5hhbfJv+MeFnYIhN81STo1mPxpjOlN2xe2S1mb2PJZ9FdwF6Jya0u vleantYgoyaHm9DMsfqXru/0TTXrYVCqhDa4Iy8JBWAeK3h9y5FUvMoT+90mwnzeZA0KIp 9GN3CN+Br3A8K3OpFDD0k0OpbE0cL6y8KA+dk1o0vp38+YadTPMxM+YVnsuZwg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=CqFORko0; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1700713097; a=rsa-sha256; cv=none; b=WWVjf96ydkdPvpa1+8UifVDWvo879eHN6GqNbJ6uD2DAqnJaU7q9Hht4NDbaZYNMExTMDn wxr3wRAuUirpM8VhjbvkBOq1KEhz82z6u3EzaZOfmQCB1gGVDvUTnLvcdAAjcx2zLQL1ZD Rl0pwWO/I1spmJTDa42y/9PLpyvfo2m1HC4s1nuap0IKdnFUbI9gK/Hid1MVcKlcQUIwJ3 tSH4bmeHdwKUUTjiVdxuWxoH446dHSqyytx9qpykGS2Dtc8x7PIjID4VtsaraI3MEtvRDm 4C1YQphaCdewjyxbIeTBaz/N3BdQu698oQybiJCKBPh3LTUD4Sn5k/zMQnb0dA== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1r61A9-0000Vy-QQ; Wed, 22 Nov 2023 23:18:01 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1r61A8-0000Vn-Ng for bug-guix@gnu.org; Wed, 22 Nov 2023 23:18:00 -0500 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1r61A7-0007IE-Be for bug-guix@gnu.org; Wed, 22 Nov 2023 23:17:59 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1r61AA-000520-HM for bug-guix@gnu.org; Wed, 22 Nov 2023 23:18:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#62491: [berlin] certbot renewal appears to be broken Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 23 Nov 2023 04:18:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 62491 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Giovanni Biscuolo Cc: "62491@debbugs.gnu.org" <62491@debbugs.gnu.org>, Attila Lendvai , Ludovic =?UTF-8?Q?Court=C3=A8s?= Received: via spool by 62491-submit@debbugs.gnu.org id=B62491.170071307219322 (code B ref 62491); Thu, 23 Nov 2023 04:18:02 +0000 Received: (at 62491) by debbugs.gnu.org; 23 Nov 2023 04:17:52 +0000 Received: from localhost ([127.0.0.1]:60322 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r619z-00051a-DY for submit@debbugs.gnu.org; Wed, 22 Nov 2023 23:17:51 -0500 Received: from mail-qk1-x72d.google.com ([2607:f8b0:4864:20::72d]:53347) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r619w-00051M-QC for 62491@debbugs.gnu.org; Wed, 22 Nov 2023 23:17:50 -0500 Received: by mail-qk1-x72d.google.com with SMTP id af79cd13be357-778999c5ecfso23833485a.2 for <62491@debbugs.gnu.org>; Wed, 22 Nov 2023 20:17:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1700713059; x=1701317859; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=hc3dSbjjqYAcRLE0tYs+zumi+3FWD86aPUn2Nkd1muU=; b=CqFORko0D3INTbcaSNVvDixCm+KqXoBPKUMCOmXBQIpGBpuRgjiMtj4mWr3h6dce82 +G1atYfmkHF3epIj1FtRXp1lmp6LQbH+vLcDZUS0ffgksMd2fgIZVuuUGy7V4TqtcGfc 6BN+bkiWdM+wlnGRpR2FX8RIIH0g3jkgI6NrY0ep88r5bXTW7QSteH4KuUs+1vB/V33v 617V0au1M8IDGpD3LPBY0BQ85DqOvDbrXDB8n/sSKQy9SH7zNZr4BsvsuLI+/Op3Er/6 1CkLKBZihmcxrz3+DGDK0Zh5hJTkzj146LHkZ56e5XGrZAp/u2RwmXlEfaZu2c3Sxj44 HNgg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1700713059; x=1701317859; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=hc3dSbjjqYAcRLE0tYs+zumi+3FWD86aPUn2Nkd1muU=; b=jzlmYl2C0hdGmgwuAwmR9fo3SGte4l8OjtlfE40+nU6ZoK1LyZKbUJgyxQ9B2VNTnz m33cEudapQdjps8D1gtY7EGT5RoLspFR53JDnehemCYtjq+v8uVDVqNT81dAGS7wOMNW oEj48RGXACS1ti/8paQdlCaCJqMenaFDayVzNDBMc52bZEfspUkDfrUehgqXWBeij+7o J6t/dBB5p0mYIu2kMrTIgr9xVbcioE7Cobxhtdsr/w1jqooMPEgilWKQETohYZjlkyAa ppvqGOASkmkw/Chq2XjeZiA07GtsV6H1ZHNIp4BjaRCLPVc22A03U71tRLuCnQ2zVUMz tlSw== X-Gm-Message-State: AOJu0Yyigbq2pFTih8hu/I7onsZEbb34bWzBVJfHKe6WNl0vGxtj4si4 vI7fc3A4MErzZsKlqIr4o0c= X-Google-Smtp-Source: AGHT+IEh/gluqdvrlN8XD0FsqgV+UGWnJ83NmZv1yIdHRZpMX1XF2euXiha32F/JLM6l2SQibW9exA== X-Received: by 2002:ad4:5c8b:0:b0:679:f504:ac28 with SMTP id o11-20020ad45c8b000000b00679f504ac28mr4776452qvh.53.1700713059322; Wed, 22 Nov 2023 20:17:39 -0800 (PST) Received: from hurd (dsl-205-233-124-102.b2b2c.ca. [205.233.124.102]) by smtp.gmail.com with ESMTPSA id ff18-20020a0562140bd200b00679df43b715sm109793qvb.127.2023.11.22.20.17.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 22 Nov 2023 20:17:38 -0800 (PST) From: Maxim Cournoyer In-Reply-To: <87sf4x6653.fsf@xelera.eu> (Giovanni Biscuolo's message of "Wed, 22 Nov 2023 18:37:44 +0100") References: <87cz4tq501.fsf@gmail.com> <87sf4x6653.fsf@xelera.eu> Date: Wed, 22 Nov 2023 23:17:36 -0500 Message-ID: <87msv585nj.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -5.02 X-Spam-Score: -5.02 X-Migadu-Queue-Id: 9F334140B8 X-Migadu-Scanner: mx10.migadu.com X-TUID: CaR8wB7gBTMR Hi Giovanni, Giovanni Biscuolo writes: > Hello Attila, > > I'm starting using certbot on a new Guix System server of mine: I've not > much experience with this Guix service but I'm using certbot on other > machines so I hope I can help here. > > Attila Lendvai writes: > >> i don't think this is the same issue as #56678. > > AFAIU actually #56678 is (was?) caused by a duplicate certbot account: > > > Please choose an account > Choices: ['guix-hpc.bordeaux.inria.fr@2017-09-04T08:51:13Z (48c5)', > 'localhost@2016-12-03T21:08:38Z (00bc)'] > > > on bayfront, probably caused by some "manual" certbot invocation (I'm > guessing, I cannot have a look to /etc/letsenctypt) > > Lodo' please: has that issue (#56678) been solved and how? > > The problem on berlin (#62491) is (was) due to a failed challenge: > > > 2023-03-24 00:33:09 127768 certbot renew --webroot --webroot-path /var/www: Hint: The > Certificate Authority failed to download the temporary challenge files created by Certbot. > Ensure that the listed domains serve their content from the provided --webroot-path/-w and > that files created there can be downloaded from the internet. > 2023-03-24 00:33:09 127768 certbot renew --webroot --webroot-path /var/www: > 2023-03-24 00:33:09 127768 certbot renew --webroot --webroot-path /var/www: Failed to renew > certificate disarchive.guix.gnu.org with error: Some challenges have failed. > > > Maxim please: has that issue (#62491) been solved and how? I don't think it was truly resolved. The problem keeps coming and someone (usually Ludovic) has to manually run some commands get it to cooperate (IIUC). I've never investigated certbot nor configured such a setup myself, so I'm not knowledgeable about it. -- Thanks, Maxim