Re: [webmin-l] Another server failing to get let's encrypt certificate

[Kimberly <kim...@gm...>]

Looking back through the error message I noticed that the url is not 
correct; I think this was an earlier issue with Let's Encrypt.

https://domain.com.well-known/acme-challenge/

The url is not properly formed; it is missing the / after .com





On 01/24/2018 01:31 PM, Kimberly wrote:
> Anyone any ideas on why Let's Encrypt is failing?  I have now seen 
> this on two completely different servers; so it is not related to the 
> server but both servers are running webmin/Viurtualmin and both are 
> updated.
>
> I would have to go back and see the failure message from the first I 
> posted but I think this new failure is the same.
>
>
> On 01/18/2018 11:05 PM, Kimberly wrote:
>> The server was just upgraded including the python, webmin, etc. This 
>> is on a server where the certificate originally worked but is now 
>> failing.
>>
>> Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
>> Obtaining a new certificate
>> Performing the following challenges:
>> http-01 challenge for mywebsite.com
>> http-01 challenge for www.mywebsite.com
>> Using the webroot path /home/mywebsite/public_html for all unmatched 
>> domains.
>> Waiting for verification...
>> Cleaning up challenges
>> Unable to clean up challenge directory 
>> /home/mywebsite/public_html/.well-known/acme-challenge
>> Failed authorization procedure. mywebsite.com (http-01): 
>> urn:acme:error:connection :: The server could not connect to the 
>> client to verify the domain :: Fetching 
>> https://mywebsite.com.well-known/acme-challenge/IhHaCIPWON3uBI6XqcI5SNPYqifvu1d7lVaDUn3yXoE: 
>> Error getting validation data, www.mywebsite.com (http-01): 
>> urn:acme:error:connection :: The server could not connect to the 
>> client to verify the domain :: Fetching 
>> https://mywebsite.com.well-known/acme-challenge/XPq-emPKAZWOR19hreiiruVktFdRuy-d-kAEaKhGM1s: 
>> Error getting validation data
>> IMPORTANT NOTES:
>>  - The following errors were reported by the server:
>>
>>    Domain: mywebsite.com
>>    Type:   connection
>>    Detail: Fetching
>> https://mywebsite.com.well-known/acme-challenge/IhHaCIPWON3uBI6XqcI5SNPYqifvu1d7lVaDUn3yXoE: 
>>
>>    Error getting validation data
>>
>>    Domain: www.mywebsite.com
>>    Type:   connection
>>    Detail: Fetching
>> https://mywebsite.com.well-known/acme-challenge/XPq-emPKAZWOR19hreiiruVktFdRuy-d-kAEaKhGM1s: 
>>
>>    Error getting validation data
>>
>>    To fix these errors, please make sure that your domain name was
>>    entered correctly and the DNS A/AAAA record(s) for that domain
>>    contain(s) the right IP address. Additionally, please check that
>>    your computer has a publicly routable IP address and that no
>>    firewalls are preventing the server from communicating with the
>>    client. If you're using the webroot plugin, you should also verify
>>    that you are serving files from the webroot path you provided.
>>
>> Plugins selected: Authenticator manual, Installer None
>> Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
>> Obtaining a new certificate
>> Performing the following challenges:
>> dns-01 challenge for mywebsite.com
>> dns-01 challenge for www.mywebsite.com
>> Waiting for verification...
>> Cleaning up challenges
>> Failed authorization procedure. mywebsite.com (dns-01): 
>> urn:acme:error:unauthorized :: The client lacks sufficient 
>> authorization :: No TXT record found at 
>> _acme-challenge.mywebsite.com, www.mywebsite.com (dns-01): 
>> urn:acme:error:unauthorized :: The client lacks sufficient 
>> authorization :: No TXT record found at 
>> _acme-challenge.www.mywebsite.com
>> IMPORTANT NOTES:
>>  - The following errors were reported by the server:
>>
>>    Domain: mywebsite.com
>>    Type:   unauthorized
>>    Detail: No TXT record found at _acme-challenge.mywebsite.com
>>
>>    Domain: www.mywebsite.com
>>    Type:   unauthorized
>>    Detail: No TXT record found at _acme-challenge.www.mywebsite.com
>>
>>    To fix these errors, please make sure that your domain name was
>>    entered correctly and the DNS A/AAAA record(s) for that domain
>>    contain(s) the right IP address.
>>
>>
>> ------------------------------------------------------------------------------ 
>>
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> -
>> Forwarded by the Webmin mailing list at 
>> web...@li...
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>
>
>
> ------------------------------------------------------------------------------ 
>
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at 
> web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>