Why is the certificate not updated?

Question

Digital certificates

sudo certbot renew --dry-run
Password:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/mydomain.ru.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for mydomain.ru
Waiting for verification...
Challenge failed for domain mydomain.ru
http-01 challenge for mydomain.ru
Cleaning up challenges
Attempting to renew cert (mydomain.ru) from /etc/letsencrypt/renewal/mydomain.ru.conf produced an unexpected error: Some challenges have failed.. Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/mydomain.ru/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
** DRY RUN: simulating 'certbot renew' close to cert expiry
**          (The test certificates below have not been saved.)

All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/mydomain.ru/fullchain.pem (failure)
** DRY RUN: simulating 'certbot renew' close to cert expiry
**          (The test certificates above have not been saved.)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: mydomain.ru
   Type:   connection
   Detail: Fetching
   http://mydomain.ru/.well-known/acme-challenge/_Sp2hyssssssDmbziNT5qwVPvXTqMOpnz9AL0:
   Connection refused

as I understand it, he needs to write somewhere the path where to put this _Sp2hyssssssDmbziNT5qwVPvXTqMOpnz9AL0

Answer 1

If you confirm domain ownership via HTTP, you need to add something like this to the block responsible for processing requests to your domain on port 80:

location /.well-known/acme-challenge {
                root /var/www/letsencrypt;
        }

The directory in which the challenge file will be placed is configured by Certbot with the Z.Y. directive -w /var/www/letsencrypt
. - noticed that you didn't specify which webserver you have. My example is relevant for nginx.