Authorization result: invalid

[v2bikum]

Was running the tool to create certificate and it failed with 400 .

My domain is:remote.romartrans.com

I ran this command:

It produced this output:

1: Single binding of an IIS site
2: SAN certificate for all bindings of an IIS site
3: SAN certificate for all bindings of multiple IIS sites
4: Manually input host names
C: Cancel

Which kind of certificate would you like to create?: 4

Enter comma-separated list of host names, starting with the primary one: remote.romartrans.com

[INFO] Plugin Manual generated target [Manual] [1 binding - remote.romartrans.com]

1: Default Web Site

Choose site to create new bindings: 1

Enter an email address (not public, used for renewal fail notices): supportteam@lfrog.com

Do you agree to https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf? (y/n): - yes

[INFO] Authorize identifier: remote.romartrans.com
[INFO] Authorizing remote.romartrans.com using http-01 validation (SelfHosting)
[INFO] Answer should now be browsable at http://remote.romartrans.com/.well-known/acme-challenge/BWJKpzZA61RWJFbndyeUgAipO8aPMbdJso8tjijOXbE
[EROR] Authorization result: invalid
[EROR] ACME server reported:
[EROR] [type] urn:acme:error:connection
[EROR] [detail] Fetching http://remote.romartrans.com/.well-known/acme-challenge/BWJKpzZA61RWJFbndyeUgAipO8aPMbdJso8tjijOXbE: Connection refused
[EROR] [status] 400
[EROR] Create certificate failed

[stevenzhu]

Hi,

Which tool did you use?
Could you please provide us the link to that tool?

The authorization is invalid because Let’s Encrypt need to be able to connect to your server, but you didn’t allow that connection (port closed). If you are performing http validation, you must allow Let’s Encrypt (or the ‘external world’) to connect to your server and see the correct token. Otherwise, you’ll need to use DNS validation, which is basically add a TXT record (for each host) everytime you request a new certificate.

Thanks

[v2bikum]

Its resolved, I just made sure port 80 is open.