# LE not working on renewals from site moves **URL:** \ **Category:** Uncategorized\ **Created:** [February 3, 2021, 7:44am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688 "2021-02-03T07:44:33Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![andrewnewby](https://forum.hestiacp.com/letter_avatar_proxy/v4/letter/a/bcef8e/32.png) [@andrewnewby](https://forum.hestiacp.com/u/andrewnewby)\ **Post date:** [February 3, 2021, 7:44am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/1 "2021-02-03T07:44:33Z")
Hi, I moved all my sites over from Vesta to Hestia using backups created on Vesta. It all seemed to work well (apart from if the passwords were simple from the old server, it wouldn’t create new ones, and thus render the apps unable to connect - but this is fixable by updating the app logins in the scripts) I now have another issue. I can’t seem to get the LE stuff to renew. > ==[Step 5]== > > - status: 400 > - nonce: 01047cqyVSKcLcCyrF1QYJn9a9r8khF4StVrUqLje2Qcpps > - validation: > - details: Unable to update challenge :: authorization must be pending > - answer: HTTP/2 400 > server: nginx > date: Wed, 03 Feb 2021 02:20:15 GMT > content-type: application/problem+json > content-length: 144 > boulder-requester: 69658433 > cache-control: public, max-age=0, no-cache > link: [https://acme-v02.api.letsencrypt.org/directory](https://acme-v02.api.letsencrypt.org/directory);rel=“index” > replay-nonce: 01047cqyVSKcLcCyrF1QYJn9a9r8khF4StVrUqLje2Qcpps > > { > “type”: “urn:ietf:params:acme:error:malformed”, > “detail”: “Unable to update challenge :: authorization must be pending”, > “status”: 400 > } > > ==[Abort Step 5]== > =\> Wrong status I get the " authorization must be pending" error via email. I’ve had this before on some of the sites, and all I did was remove the Lets Encrypt setting for the domain, save, and then set it up again - but it still gives me the error: Error: Let’s Encrypt validation status 400. Details: Unable to update challenge :: authorization must be pending I’ve even tried adding another sub-domain, to try and get LE to issue a new certificate, but even that doesn’t work 😕 Going by this the error is due to it not matching: [https://acme-v02.api.letsencrypt.org/acme/chall-v3/10538968702/ePtJHQ](https://acme-v02.api.letsencrypt.org/acme/chall-v3/10538968702/ePtJHQ) What am I missing? (this particular site is just the standard “Wordpress” theme that comes with Hestia) Cheers Andy ---
**Author:** ![eris](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/eris/32/1241_2.png) [@eris](https://forum.hestiacp.com/u/eris)\ **Post date:** [February 3, 2021, 7:49am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/2 "2021-02-03T07:49:19Z")
Disable force ssl ---
**Author:** ![andrewnewby](https://forum.hestiacp.com/letter_avatar_proxy/v4/letter/a/bcef8e/32.png) [@andrewnewby](https://forum.hestiacp.com/u/andrewnewby)\ **Post date:** [February 3, 2021, 8:07am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/3 "2021-02-03T08:07:07Z")
Hi, Thanks for the quick reply. I assume you mean “Enable automatic HTTPS redirection”? I tried that, but still no joy ☹ ![Screenshot_2021-02-03 south newbyhost com 9183 - WEB - Hestia Control Panel](https://forum.hestiacp.com/uploads/default/original/2X/f/ff204456e8f0f37a0a128f3b50f11ac3a9da2033.png) I still get: > Error: Let’s Encrypt validation status 400. Details: Unable to update challenge :: authorization must be pending Cheers Andy ---
**Author:** ![eris](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/eris/32/1241_2.png) [@eris](https://forum.hestiacp.com/u/eris)\ **Post date:** [February 3, 2021, 8:07am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/4 "2021-02-03T08:07:54Z")
What DNS servers are you using? [https://docs.hestiacp.com/admin\_docs/ssl\_certificates.html](https://docs.hestiacp.com/admin_docs/ssl_certificates.html) ---
**Author:** ![andrewnewby](https://forum.hestiacp.com/letter_avatar_proxy/v4/letter/a/bcef8e/32.png) [@andrewnewby](https://forum.hestiacp.com/u/andrewnewby)\ **Post date:** [February 3, 2021, 8:15am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/5 "2021-02-03T08:15:17Z")
Linode. The ipv4 and ipv6 are both set to the new server. This is the new Linodes IPs: ![Screenshot_2021-02-03 south - Analytics Linode Manager](https://forum.hestiacp.com/uploads/default/original/2X/b/b09a63d39a4e3784339d74142304176f213669f2.png) …and this is the DNS settings for that domain: ![Screenshot_2021-02-03 octobrachia com - DNS Records Linode Manager](https://forum.hestiacp.com/uploads/default/original/2X/7/7a30212695df5759a178cadb164e03e954f8a315.png) The move was done quite a while back (2 or so weeks ago), so the DNS should have updated to the LE already ---
**Author:** ![Raphael](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/raphael/32/5217_2.png) [@Raphael](https://forum.hestiacp.com/u/Raphael)\ **Post date:** [February 3, 2021, 8:16am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/6 "2021-02-03T08:16:16Z")
Remove IPv6, it can’t be validated from let’s encrypt which causes a LE400 ---
**Author:** ![andrewnewby](https://forum.hestiacp.com/letter_avatar_proxy/v4/letter/a/bcef8e/32.png) [@andrewnewby](https://forum.hestiacp.com/u/andrewnewby)\ **Post date:** [February 3, 2021, 8:26am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/7 "2021-02-03T08:26:20Z")
Hmmm really? I’ve used IPv6 fine on Vesta, and since on new sites with Hestia? On a side note - does Hestia work with DNS validation for domains and LE? ---
**Author:** ![andrewnewby](https://forum.hestiacp.com/letter_avatar_proxy/v4/letter/a/bcef8e/32.png) [@andrewnewby](https://forum.hestiacp.com/u/andrewnewby)\ **Post date:** [February 3, 2021, 8:32am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/8 "2021-02-03T08:32:59Z")
Aaah I got it!!! I compared my old Vesta templates with the new ones, and noticed that the .tpl file was missing the ipv6 listener: `listen [::]:%web_port%;` …and the .stpl was missing: `listen [::]:%web_port% ssl http2;` I added that in, rebuilt the domain, and voila - it works 🙂 Maybe worth adding that into the distro in all the .tpl/.tpls files templates?) Cheers Andy ---
**Author:** ![Raphael](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/raphael/32/5217_2.png) [@Raphael](https://forum.hestiacp.com/u/Raphael)\ **Post date:** [February 3, 2021, 8:39am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/9 "2021-02-03T08:39:25Z")
> [@andrewnewby](#): > > I added that in, rebuilt the domain, and voila - it works 🙂 Maybe worth adding that into the distro in all the .tpl/.tpls files templates?) Will be part of the IPv6 implementation - work pending 🙂. ---
**Author:** ![andrewnewby](https://forum.hestiacp.com/letter_avatar_proxy/v4/letter/a/bcef8e/32.png) [@andrewnewby](https://forum.hestiacp.com/u/andrewnewby)\ **Post date:** [February 3, 2021, 8:46am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/10 "2021-02-03T08:46:13Z")
Thanks - keep up the good work 🙂 ---
**Author:** ![system](https://forum.hestiacp.com/uploads/default/original/1X/d9a5b68bf50ced83e880b56452e592b204761b19.png) [@system](https://forum.hestiacp.com/u/system)\ **Post date:** [March 5, 2021, 8:46am UTC](https://forum.hestiacp.com/t/le-not-working-on-renewals-from-site-moves/2688/11 "2021-03-05T08:46:17Z")
Closed on March 5, 2021, 8:46am UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.