An error occurred creating certificates with Let's Encrypt

Please help, I am trying to get SSL Certificate in my website, I am using bitnami

After I ran this command:
sudo /opt/bitnami/bncert-tool

I got the error below:

An error occurred creating certificates with Let's Encrypt:

2024/07/17 17:15:47 [INFO] [razorbackdrains.au, www.razorbackdrains.au] acme:
Obtaining bundled SAN certificate
2024/07/17 17:15:48 [INFO] [razorbackdrains.au] AuthURL:
https://acme-v02.api.letsencrypt.org/acme/authz-v3/378286077557
2024/07/17 17:15:48 [INFO] [www.razorbackdrains.au] AuthURL:
https://acme-v02.api.letsencrypt.org/acme/authz-v3/378286077567
2024/07/17 17:15:48 [INFO] [razorbackdrains.au] acme: use tls-alpn-01 solver
2024/07/17 17:15:48 [INFO] [www.razorbackdrains.au] acme: use tls-alpn-01 solver
2024/07/17 17:15:48 [INFO] [razorbackdrains.au] acme: Trying to solve
TLS-ALPN-01
2024/07/17 17:15:55 [INFO] [razorbackdrains.au] The server validated our request
2024/07/17 17:15:55 [INFO] [www.razorbackdrains.au] acme: Trying to solve
TLS-ALPN-01
2024/07/17 17:16:02 [INFO] Skipping deactivating of valid auth:
https://acme-v02.api.letsencrypt.org/acme/authz-v3/378286077557
2024/07/17 17:16:02 [INFO] Deactivating auth:
https://acme-v02.api.letsencrypt.org/acme/authz-v3/378286077567
2024/07/17 17:16:02 Could not obtain certificates:
error: one or more domains had a problem:

The key part of the error is missing for some reason. But, after looking at the two authz records it looks like a DNS problem.

The www subdomain has both an IPv4 A record and an IPv6 AAAA record. Your registered domain has only the IPv4. Let's Encrypt favors an IPv6 address and that is failing. That IPv6 address is not an AWS IP like the IPv4. So, you probably just need to remove that DNS AAAA record

4 Likes

Thank you @MikeMcQ it worked, I removed the AAAA record in my DNS settings and it proceeded. It has an SSL certificate now

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.