can not use Let's Encrypt ssl

[bluesky888]

Could not execute your request

Challenge pre-checks for http://ceramicferrule.net/.well-known/acme-challenge/letsencrypt_1596944857 failed... Command:
/usr/local/bin/curl --connect-timeout 40 -k --silent --resolve ceramicferrule.net:80:142.11.211.9 --resolve ceramicferrule.net:443:142.11.211.9 -I -L -X GET http://ceramicferrule.net/.well-known/acme-challenge/letsencrypt_1596944857
Exiting.

 

[floyd]

Do you have Force SSL turned on for that domain?

 

[bluesky888]

how to do
thanks

 

[floyd]

When you enabled SSL there is a checkbox with Force SSL. Do you have that checked?

 

[bluesky888]

i have forced for above photo
no use

 

[floyd]

You should not have force on until AFTER you have a certificate.

 

[bluesky888]

thanks for reply
i use Free & automatic certificate from Let's Encrypt
i think it is no need to get the certificate

 

[floyd]

When you use Let's Encrypt you are "getting" the certificate. Do NOT turn on Force SSL until after that is done.

 

[bluesky888]

i have tried
also it is same error

 

[bluesky888]

no one help to solve?

 

[floyd]

Now that you have force https turned off try it now. It will not be the same error. Post the error here.

 

[hunteralberto]

Hi,

I'm having the same issue. When I did what you say have this error:

 

[floyd]

You have blacked out so much stuff........

 

[hunteralberto]

Sorry,

Here is...

 

[factor]

You might fix all of your DNS issues and see if that helps.

intoDNS: krispykreme.do - check DNS server and mail server health

intoDNS: Checking health and configurtion of DNS server and mail server for domainkrispykreme.do.

intodns.com

Free Tools - Software Reviews, Opinions, and Tips - DNSstuff

Explore DNSstuff's suite of free tools. Get comprehensive information and utilities to analyze, troubleshoot, and optimize your performance.

tools.dnsstuff.com

Looks like you might have had dnssec on at some point and didn't remove or recreated new ds records.

 

[hunteralberto]

Thank for you help. I fix the problem.

Solution: My domain DNS was pointing to another server. When the system try to renew the certificate it get and error because it can't copy the Challenge in the remote host. What I did is change the DNS entry to point to a local host, recreate the certificate and perfect, it work. Then I change back the DNS to the remote host. Now I will need to renew the cert manually because there's no way in the remote host.

If some body know how to automate this task, I will be glad.

Thanks,

 

[factor]

By remote DNS do you mean 3rd party external DNS?
Like cloudflare or dnseasy

 

[hunteralberto]

No, I'm pointing the KrispyKreme.do domain to a 3rd party application that I don't manager.

 

[factor]

if they are one of these

Version 1.61.4 | Directadmin Docs

DirectAdmin Knowledge Base

directadmin.com

Lego :: Let’s Encrypt client and ACME library written in Go.

Let’s Encrypt client and ACME library written in Go. Features ACME v2 RFC 8555 Support RFC 8737: TLS Application‑Layer Protocol Negotiation (ALPN) Challenge Extension Support RFC 8738: issues certificates for IP addresses Support RFC 9773: Renewal Information (ARI) Extension Support...

go-acme.github.io

You might can automate it.

 

[2726]

I had the same report. Cloudflare appears to be causing the problem for me. Don't have the DNS running over cloudflare anymore and have no more problems.