Lets Encrypt for Hostname not resolving

J

jordivn

Verified User
Joined
Nov 4, 2016
Messages
62
Hi All,

I get the follow error:
Code: 
 $ ./letsencrypt.sh request_single hosting.wes-server.nl 4096
Setting up certificate for a hostname: hosting.wes-server.nl
Requesting new certificate order...
Processing authorization for hosting.wes-server.nl...
Waiting for domain verification...
Trying again...
1..2..3..4..5..
Challenge status: invalid. Challenge error: "type": "http-01",  "status": "invalid",  "error": {    "type": "urn:ietf:params:acme:error:unauthorized",    "detail": "Invalid response from http://hosting.wes-server.nl/.well-known/acme-challenge/tb2vWJgMDONrTecKmnn2f-GfCaXIxOMdmg9UZ_Et5ko [136.144.168.120]: \"\u003c!doctype html\u003e\\r\\n\u003chtml lang=\\\"en\\\"\u003e\\r\\n\u003chead\u003e\\r\\n\\t\u003ctitle\u003eUnauthorized Access\u003c/title\u003e\\r\\n\\t\u003cmeta charset=\\\"UTF-8\\\"\u003e\\r\\n\\t\u003cscript src='https://w\"",    "status": 403  . Exiting...
[

I'm running CentOs 7.

In my directadmin.conf i set:
SSL=1
dns_ttl=1
enable_ssl_sni=1
mail_sni=1
letsencrypt_account_email=1
dns_tlsa=1

I cant figerout why it can't validate.

I did the .wel-know test (http://hosting.wes-server.nl/.well-known/acme-challenge/test.txt)

Any idea's?
 
Hello,

You should have letsencrypt=1

Then ./build letsencrypt && ./build rewrite_confs
 
zEitEr said:
Hello,

You should have letsencrypt=1

Then ./build letsencrypt && ./build rewrite_confs
Click to expand...

Offcourse it's set and installed. All other domains work just fine on wildcard. Just not the server hostname.
I geuss it has something to do with the way the validation works. I recently activate the option for dns validation instead of .well-know.
But when validating the hostname of the server, no record gets created in the dns records
 
Your server does not seem to be available over IPv6. You need to fix it.
 
Knipsel.JPG

huh?
 
Yes, either remove AAAA from DNS, or add IPv6 into Directadmin at admin level and adjust firewall.
 
You must log in or register to reply here.
Back
Top