I'm trying to renew my letsencrypt certs and getting the following error:
remote error: tls: handshake failure
How do I fix this?
Consider specifying the
http-01 method. For example,
sudo certbot renew --preferred-challenges http-01
http-01 challenge works by generating a file at a specific web-accessible location under the domain under consideration. The challenge relies on HTTP (port 80) rather than HTTPS (e.g., the
tls-sni-01 challenge method). Avoiding reliance on TLS can be a step forward in addressing the error you encounter.
--preferred-challenges, perhaps self-evidently, cues certbot, for plugins which can handle more than one challenge method.