Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: james.jtfsneaproject.work

I ran this command: sudo certbot --apache

It produced this output:
Requesting a certificate for james.jtfsneaproject.work

Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: james.jtfsneaproject.work
Type: dns
Detail: no valid A records found for james.jtfsneaproject.work; no valid AAAA records found for james.jtfsneaproject.work

Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

My web server is (include version): most recent apache

The operating system my web server runs on is (include version):

I can login to a root shell on my machine (yes

I'm using a control panel to manage my site (no

The version of my client is auto

2

A record on your domain points to a private IP in the 192.168.0.0/16 range. In order for Let's Encrypt to verify your ownership of a domain, it needs to connect to an address behind your domain, which it cannot do with a private IP.

… is different in multitudes of OS distributions. Specifying a number would be helpful.

Also doesn't sound like a number.

3 Likes
3

Hi @James07, and welcome to the LE community forum :slight_smile:

You could start by showing us this file:
"See the logfile /var/log/letsencrypt/letsencrypt.log"

Then you could also show us the output of:
sudo apachectl -t -D DUMP_VHOSTS

2 Likes
4

Server version: Apache/2.4.57 (Raspbian)

certbot version: 2.8.0

5

No one on the Internet is going to be able to reach your site at this IP:

Name:    james.jtfsneaproject.work
Address: 192.168.0.239

And when LE can't reach it, it can't validate via HTTP authentication, and it won't get a cert.

4 Likes
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.