i have 2 domains: myexample.com and my-example.com.
I get global API key end write in .ini file.
First creating - success.
Renew - fail.
Why?
root@v43195:~# certbot certonly --dns-cloudflare --dns-cloudflare-credentials ~/.secrets/certbot/cloudflare.ini -d myexample.com -d *.myexample.com -d my-example.com -d *.my-example.com && certbot --apache -d myexample.com -d *.myexample.com -d my-example.com -d *.my-example.com
Success, work.
root@v43195:~# certbot renew --dry-run
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/myexample.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert not due for renewal, but simulating renewal for dry run
Plugins selected: Authenticator dns-cloudflare, Installer None
Renewing an existing certificate
Performing the following challenges:
dns-01 challenge for my-example.com
dns-01 challenge for myexample.com
dns-01 challenge for my-example.com
dns-01 challenge for myexample.com
Waiting 10 seconds for DNS changes to propagate
Waiting for verification...
Challenge failed for domain my-example.com
dns-01 challenge for my-example.com
Cleaning up challenges
Attempting to renew cert (myexample.com) from /etc/letsencrypt/renewal/myexample.com.conf produced an unexpected error: Some challenges have failed.. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/myexample.com/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
** DRY RUN: simulating 'certbot renew' close to cert expiry
** (The test certificates below have not been saved.)
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/myexample.com/fullchain.pem (failure)
** DRY RUN: simulating 'certexample renew' close to cert expiry
** (The test certificates above have not been saved.)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: my-example.com
Type: unauthorized
Detail: Incorrect TXT record
"ndWfKJ9Vnc9zqi13nA2AQ_nkKkIPIKxw4uwsDITe_M4" found at
_acme-challenge.my-example.com
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.
root@v43195:~#
Error.
How fix?