I ran this command: ```
sudo lego --tls --email="kiran@briksinfotech.com" --domains=“civilminingsafety.com.au” --domains=“www.civilminingsafety.com.au” --path="/etc/lego" run
It produced this output:
[INFO] [civilminingsafety.com.au, www.civilminingsafety.com.au] acme: Obtaining bundled SAN certificate
2019/05/14 02:49:08 [INFO] [civilminingsafety.com.au] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/EJB
Ckx7Qf71XELeknOzVPoIwZy68YFOCOSvGVmj6-0w
2019/05/14 02:49:08 [INFO] [www.civilminingsafety.com.au] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/qKxSIoINRvL1JvlnYNPqC8xdyhnDt-GM8K4Wfmsw-9s
2019/05/14 02:49:08 [INFO] [civilminingsafety.com.au] acme: use tls-alpn-01 solver
2019/05/14 02:49:08 [INFO] [www.civilminingsafety.com.au] acme: use tls-alpn-01 solver
2019/05/14 02:49:08 [INFO] [civilminingsafety.com.au] acme: Trying to solve TLS-ALPN-01
2019/05/14 02:49:14 [INFO] [www.civilminingsafety.com.au] acme: Trying to solve TLS-ALPN-01
2019/05/14 02:49:22 [INFO] Unable to deactivated authorizations: https://acme-v02.api.letsencrypt.org/acme/authz/EJBCkx7Qf71XELeknOzVPoIwZy68YFOCOSvGVmj6-0w
2019/05/14 02:49:23 [INFO] Unable to deactivated authorizations: https://acme-v02.api.letsencrypt.org/acme/authz/qKxSIoINRvL1JvlnYNPqC8xdyhnDt-GM8K4Wfmsw-9s
2019/05/14 02:49:23 Could not obtain certificates:acme: Error -> One or more domains had a problem:
[civilminingsafety.com.au] acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: Cannot negotiate ALPN protocol "acme-tls/1" for tls-alpn-01 challenge, url:
[www.civilminingsafety.com.au] acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: Cannot negotiate ALP
N protocol "acme-tls/1" for tls-alpn-01 challenge, url:
My web server is (include version):
Ubuntu 16.04.5 LTS (GNU/Linux 4.4.0-1075-aws x86_64)
The operating system my web server runs on is (include version):
Ubuntu,
My hosting provider, if applicable, is:
AWS LightSail
I can login to a root shell on my machine (yes or no, or I don't know):
Yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Online SSH provided by LightSail
The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot):
Latest One downloaded using ```
curl -Ls https://api.github.com/repos/xenolf/lego/releases/latest | grep browser_download_url | grep linux_amd64 | cut -d '"' -f 4 | wget -i -
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it [2404:8280:a222:bbbb:bba1:97:ffff:ffff]:80
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it [2404:8280:a222:bbbb:bba1:97:ffff:ffff]:80
If you fix your ipv6, you can use http-01 validation.
You should fix your ipv6, because users with ipv6 may have problems to connect your site.
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it [2404:8280:a222:bbbb:bba1:97:ffff:ffff]:80
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it [2404:8280:a222:bbbb:bba1:97:ffff:ffff]:80
Visible Content:
The last row is critical to create a certificate via http-01 validation.
Hi, sorry, I not able to follow above steps as I’m not expert in networking.
Actually, I was able to easily create certificates before for the same domain and server by following the bitnami documentation, but this time showing the errors.
Should I try in new server or contact the domain provider ( crazydomains) to fix this issues?
I see they made the DNS records complicated and have many AAAA records. I removed one AAAA pointing to www.civilmining.com.au, but still not working.
Thanks