Menu
▾
▴
Re: [webmin-l] Let's Encrypt Failure
|
From: Jamie C. <jca...@we...> - 2017-12-04 01:54:06
|
Someone else reported this error as well, however I've been unable to re-produce
it or determine why it could happen! I do have some theories and have made changes
to be included in Webmin 1.870 that should address is though.
On 02/Dec/2017 15:13 Kimberly <kim...@gm...> wrote ..
> Any ideas on why the Let's Encrypt certificate request is failing?
>
>
> Ubuntu 16.04.3 (Xenial)
> Virtualmin 6.01-3/Webmin 1.860
> Kernel 4.4.0-101
> Nginx 1.12.2
> MariaDB 10.1.29
>
> Requesting a certificate forREDACTED from Let's Encrypt ..
> .. request failed : Web-based validation failed : Failed to request certificate
> :Parsing account key...
> Parsing CSR...
> Registering account...
> Already registered!
> Verifying REDACTED...
> Wrote file to /home/REDACTED/public_html/.well-known/acme-challenge/exfJVslKruBuaXrY1_hQnAayAAWo7vQ8sJf0t1rA71o,
> but couldn't download http://REDACTED/.well-known/acme-challenge/exfJVslKruBuaXrY1_hQnAayAAWo7vQ8sJf0t1rA71o
> Traceback (most recent call last):
> File "/usr/share/webmin/webmin/acme_tiny.py", line 235, in <module>
> main(sys.argv[1:])
> File "/usr/share/webmin/webmin/acme_tiny.py", line 231, in main
> signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, args.dns_hook,
> args.cleanup_hook, log=LOGGER, CA=args.ca)
> File "/usr/share/webmin/webmin/acme_tiny.py", line 184, in get_crt
> domain, challenge_status))
> ValueError: REDACTED challenge did not pass: {u'status': u'invalid', u'validationRecord':
> [{u'addressesResolved': [u'REDACTED'], u'url': u'https://REDACTED/.well-known/acme-challenge/exfJVslKruBuaXrY1_hQnAayAAWo7vQ8sJf0t1rA71o',
> u'hostname': u'REDACTED', u'addressesTried': [], u'addressUsed': u'REDACTED', u'port':
> u'443'}, {u'addressesResolved': [u'REDACTED'], u'url': u'http://REDACTED/.well-known/acme-challenge/exfJVslKruBuaXrY1_hQnAayAAWo7vQ8sJf0t1rA71o',
> u'hostname': u'REDACTED', u'addressesTried': [], u'addressUsed': u'REDACTED', u'port':
> u'80'}], u'keyAuthorization': u'exfJVslKruBuaXrY1_hQnAayAAWo7vQ8sJf0t1rA71o.83QlK5VKSOV2NLNaO1RvT7uR-pfnlNKPt-5HZinrs5Y',
> u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/VF3KryHRKL5PpY016fxEmLZ5Q1WKwJ6GlJKc92pTXeg/2615538286',
> u'token': u'exfJVslKruBuaXrY1_hQnAayAAWo7vQ8sJf0t1rA71o', u'error': {u'status':
> 403, u'type': u'urn:acme:error:unauthorized', u'detail': u'Invalid response from
> http://REDACTED/.well-known/acme-challe
> nge/exfJVslKruBuaXrY1_hQnAayAAWo7vQ8sJf0t1rA71o: "<!DOCTYPE html>\n<html>\n<head>\n<script>(function
> () {
> "'}, u'type': u'http-01'}
> DNS-based validation failed : Failed to request certificate :Parsing account key...
> Parsing CSR...
> Registering account...
> Already registered!
> Verifying REDACTED...
> Undefined subroutine &main::get_bind_zone_for_domain called at /usr/share/webmin/webmin/letsencrypt-dns.pl
> line 21.
> Traceback (most recent call last):
> File "/usr/share/webmin/webmin/acme_tiny.py", line 235, in <module>
> main(sys.argv[1:])
> File "/usr/share/webmin/webmin/acme_tiny.py", line 231, in main
> signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, args.dns_hook,
> args.cleanup_hook, log=LOGGER, CA=args.ca)
> File "/usr/share/webmin/webmin/acme_tiny.py", line 184, in get_crt
> domain, challenge_status))
> ValueError: REDACTED challenge did not pass: {u'status': u'invalid', u'keyAuthorization':
> u'FsOUVt8L4TWb1k3Z7GgXYkGNpRXtbO_NaguSW6l-pgI.83QlK5VKSOV2NLNaO1RvT7uR-pfnlNKPt-5HZinrs5Y',
> u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/Kh9XWI2cBDF3bbdgSzkS9aBHS4TP40IgbIEmHfAPRQk/2615538548',
> u'token': u'FsOUVt8L4TWb1k3Z7GgXYkGNpRXtbO_NaguSW6l-pgI', u'error': {u'status':
> 400, u'type': u'urn:acme:error:connection', u'detail': u'DNS problem: NXDOMAIN
> looking up TXT for _acme-challenge.REDACTED'}, u'type': u'dns-01'}
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
|
