Cant get new certificate

Server
1

After running certbot --apache -d pagesmade.com -d www.pagesmade.com

I get the following error:

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for pagesmade.com
http-01 challenge for www.pagesmade.com
Enabled Apache rewrite module
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. pagesmade.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://pagesmade.com/.well-known/acme-challenge/MB4MjstBc3XYRnIJoSU5mPabdne_ojv37NsVw5TVrnI [13.126.194.94]: “\r\n502 Bad Gateway\r\n<body bgcolor=“white”>\r\n

502 Bad Gateway

\r\n\r”, www.pagesmade.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://www.pagesmade.com/.well-known/acme-challenge/14biheL6IvJhfouJParSP1cwBhyMilD2ywNn-eCoLA8 [13.126.194.94]: “\r\n502 Bad Gateway\r\n<body bgcolor=“white”>\r\n

502 Bad Gateway

\r\n\r”

IMPORTANT NOTES:

What may be the possible solns.

2

Hi @pmade

checking your domain there answers always a http status 502 - Bad Gateway ( https://check-your-website.server-daten.de/?q=pagesmade.com ):

Domainname Http-Status redirect Sec. G
• http://pagesmade.com/
13.126.127.39 502 0.270 S
Bad Gateway
• http://pagesmade.com/
13.126.194.94 502 0.257 S
Bad Gateway
• http://www.pagesmade.com/
13.126.127.39 502 0.264 S
Bad Gateway
• http://www.pagesmade.com/
13.126.194.94 502 0.260 S
Bad Gateway
• https://pagesmade.com/
13.126.127.39 502 1.504 N
Bad Gateway
Certificate error: RemoteCertificateChainErrors
• https://pagesmade.com/
13.126.194.94 502 1.210 N
Bad Gateway
Certificate error: RemoteCertificateChainErrors
• https://www.pagesmade.com/
13.126.127.39 502 1.233 N
Bad Gateway
Certificate error: RemoteCertificateChainErrors
• https://www.pagesmade.com/
13.126.194.94 502 1.203 N
Bad Gateway
Certificate error: RemoteCertificateChainErrors

http + https, same with /.well-known/acme-challenge (not copied).

Do you use Cloudflare or something else? That requires a valid certificate. So this instance can't connect your server -> http status 502.

Your certificate is expired:

CN=pagesmade.com
	21.01.2019
	21.04.2019
1 days expired	pagesmade.com, www.pagesmade.com - 2 entries

That may be the problem.

Perhaps create manual a certificate with dns-01 validation and --manual, that should always work.

Then install it and check, if the http status 502 is gone.

3

yes i use Cloudflare but i have tried to disable it, still it didnt solve the issue.
how does --manual been used?

4

Something like

certbot -d yourdomain --manual --preferred-challenges dns

Check

https://certbot.eff.org/docs/using.html#manual

--

PS: Is this 13.126.127.39 your ip address or one from Cloudflare?

If it is your ip address, it may be a local problem with your configuration, if you use some local proxy settings.

So your destination server / port doesn't work.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.