# Error during cert renewal **URL:** \ **Category:** Certificate\ **Created:** [21 September 2021 12:47 UTC](https://syncloud.discourse.group/t/error-during-cert-renewal/95 "2021-09-21T12:47:29Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![pirboazo](https://avatars.discourse-cdn.com/v4/letter/p/a183cd/32.png) [@pirboazo](https://syncloud.discourse.group/u/pirboazo)\ **Post date:** [21 September 2021 12:47 UTC](https://syncloud.discourse.group/t/error-during-cert-renewal/95/1 "2021-09-21T12:47:29Z")
Hi all I have an error during the cert renew process. > Performing the following challenges: > http-01 challenge for [mail.pirboazo.net](http://mail.pirboazo.net) > Using the webroot path /var/snap/platform/common/certbot/www for all unmatched domains. > Waiting for verification… > Challenge failed for domain [mail.pirboazo.net](http://mail.pirboazo.net) > http-01 challenge for [mail.pirboazo.net](http://mail.pirboazo.net) The domain [mail.pirboazo.net](http://mail.pirboazo.net) it not manage on my **syncloud platform** ☹ but by an email manager. ### Actualy for resolve this pb i must modify the IP on dns . **Questions** Can I change the http-01 challenge for “[mail.pirboazo.net](http://mail.pirboazo.net)” by “[pihole.pirboazo.net](http://pihole.pirboazo.net)” Or How can i suppress this domain in the list of renew ? … > 2021-09-20 21:47:39,199 - certbot - INFO - /snap/platform/current/bin/certbot --logs-dir=/var/snap/platform/common/log --max-log-backups 5 --config-dir=/var/snap/platform/common/certbot --agree-tos --email [root@pirboazo.net](mailto:root@pirboazo.net) certonly --force-renewal --cert-name [pirboazo.net](http://pirboazo.net) --webroot --webroot-path /var/snap/platform/common/certbot/www -d [pirboazo.net](http://pirboazo.net) -d [bitwarden.pirboazo.net](http://bitwarden.pirboazo.net) -d [diaspora.pirboazo.net](http://diaspora.pirboazo.net) -d [files.pirboazo.net](http://files.pirboazo.net) -d [gogs.pirboazo.net](http://gogs.pirboazo.net) -d [home-assistant.pirboazo.net](http://home-assistant.pirboazo.net) -d [installer.pirboazo.net](http://installer.pirboazo.net) -d [mail.pirboazo.net](http://mail.pirboazo.net) -d [nextcloud.pirboazo.net](http://nextcloud.pirboazo.net) -d [notes.pirboazo.net](http://notes.pirboazo.net) -d [openvpn.pirboazo.net](http://openvpn.pirboazo.net) -d [pihole.pirboazo.net](http://pihole.pirboazo.net) -d [platform.pirboazo.net](http://platform.pirboazo.net) -d [plex.pirboazo.net](http://plex.pirboazo.net) -d [rocketchat.pirboazo.net](http://rocketchat.pirboazo.net) -d [syncthing.pirboazo.net](http://syncthing.pirboazo.net) -d [users.pirboazo.net](http://users.pirboazo.net) -d [wordpress.pirboazo.net](http://wordpress.pirboazo.net) Maybe i need to do both? Merci, Thanks Pierre ---
**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\ **Post date:** [21 September 2021 19:59 UTC](https://syncloud.discourse.group/t/error-during-cert-renewal/95/2 "2021-09-21T19:59:37Z")
Hi Pierre, What you are looking for is this instruction [Custom domain · syncloud/platform Wiki · GitHub](https://github.com/syncloud/platform/wiki/Custom-domain) In short to get a valod certificate for custom domains where Syncloud does not maintain DNS you need two things: 1. Setup DNS wildcard to point at your IP on your DNS provider. 2. Open (port forward on your router) port 80 to allow Let’s Encrypt to do it’s http-01 challenge validation. Of course I want to tell you that our Premium Service already covers the first part and will cover the second part automatically soon. ---
**Author:** ![pirboazo](https://avatars.discourse-cdn.com/v4/letter/p/a183cd/32.png) [@pirboazo](https://syncloud.discourse.group/u/pirboazo)\ **Post date:** [22 September 2021 08:24 UTC](https://syncloud.discourse.group/t/error-during-cert-renewal/95/3 "2021-09-22T08:24:13Z")
Hi Boris, You said me : > [@boris](#): > > - Setup DNS wildcard to point at your IP on your DNS provider. > - Open (port forward on your router) port 80 to allow Let’s Encrypt to do it’s http-01 challenge validation. It done but as i need to have a record [mail.pirboazo.net](http://mail.pirboazo.net) who point an another IP address, the challenge do not work. I didn’t need of certificate for this sub-domain. I have a workaround but it not satisfactory because it ask a manual intervention Regards Pierre ---
**Author:** ![boris](https://avatars.discourse-cdn.com/v4/letter/b/74df32/32.png) [@boris](https://syncloud.discourse.group/u/boris)\ **Post date:** [22 September 2021 17:09 UTC](https://syncloud.discourse.group/t/error-during-cert-renewal/95/4 "2021-09-22T17:09:16Z")
I see, unfortunately right now we try to generate a certificate for all the apps in the store regardless if it is installed or not. This is done so user does not wait for a certificate after installing an app. Also mail is one of the apps. This process uses http validation of every app domain name. So this is not supported at the moment. Also we are moving to a wildcard certificate but that will only be available in free and premium modes where we control dns. ---
**Author:** ![pirboazo](https://avatars.discourse-cdn.com/v4/letter/p/a183cd/32.png) [@pirboazo](https://syncloud.discourse.group/u/pirboazo)\ **Post date:** [23 September 2021 08:08 UTC](https://syncloud.discourse.group/t/error-during-cert-renewal/95/5 "2021-09-23T08:08:23Z")
Hi Boris , Thanks a lot for your answer. It’s **clear** , so i will continue to manage manually this _small problem_. Good day to you. Pierre