Authorization result: invalid

Using Letsencrypt Win Simple sometime I receive error:unknownHost, and Authorization result is invalid link to letsencript file is browsable : http://mytestsubdomain.pwa.network/.well-known/acme-challenge/h7bBWlQQ77bpURGCoMMm6opVPx-EW09ikKOugl2RIsE, but authorization anyway it is invalid, my logs:

My domain is:mytestsubdomain.pwa.network

I ran this command:

It produced this output:
[INFO] Let’s Encrypt (Simple Windows ACME Client)
[INFO] Version 1.9.6.30465 (RELEASE)
[INFO] Please report issues at https://github.com/Lone-Coder/letsencrypt-win-simple

[INFO] Renewal period: 60
[INFO] Certificate store: WebHosting
[INFO] ACME Server: https://acme-v01.api.letsencrypt.org/
[WARN] Proxying via [System]

Enter comma-separated list of host names, starting with the primary one:
[INFO] Authorizing identifier mytestsubdomain.pwa.network using http-01 challenge
[INFO] Answer should now be browsable at http://mytestsubdomain.pwa.network/.well-known/acme-challenge/h7bBWlQQ77bpURGCoMMm6opVPx-EW09ikKOugl2RIsE
[INFO] Authorization result: invalid
[EROR] ACME server reported type urn:acme:error:unknownHost
[EROR] ACME server reported detail No valid IP addresses found for mytestsubdomain.pwa.network
[EROR] ACME server reported status 400
[EROR] Exception Exception of type ‘LetsEncrypt.ACME.Simple.AuthorizationFailedException’ was thrown.
My web server is (include version):

The operating system my web server runs on is (include version): windows server 2012 r2

The reason for:

is that your domain is enrolled to DNSSEC but is misconfigured. Since Let's Encrypt strictly validates domains enrolled to DNSSEC, it considers the domain lookup to have failed.

https://unboundtest.com/m/A/mytestsubdomain.pwa.network/YTFNGETJ

http://dnsviz.net/d/mytestsubdomain.pwa.network/dnssec/

It looks like something to do with the way you are CNAMEing to the EC2 hostname but I'm not sure on the specifics.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.