Cerbot renew opensuse 15.4 failed authenticate some domains

[rg305]

@_az

BINGO!

It seems the University is using Palo Alto firewalls and they need to be instructed to allow the LE challenge requests to reach your web server.
Below we can see the first request [from my system] reaches your server.
The second request [simulating the LE request] does not have the same response.
It is interrupted by the firewall:

#1
curl -Ii dna.engr.latech.edu/.well-known/acme-challenge/Test_File-1234
HTTP/1.1 301 Moved Permanently
Date: Mon, 02 Jan 2023 02:28:04 GMT
Server: Apache
Location: https://dna.engr.latech.edu/.well-known/acme-challenge/Test_File-1234
Content-Type: text/html; charset=iso-8859-1

#2
curl -Ii dna.engr.latech.edu/.well-known/acme-challenge/Test_File-1234  -A "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"
curl: (52) Empty reply from server

[tcbishop]

very good ... so what specific info do I need to provide the IT folks?

[rg305]

Palo Alto firewall users with failing HTTP-01 challenges: enable "acme-protocol" - Help - Let's Encrypt Community Support (letsencrypt.org)

[tcbishop]

so this is information for the IT folks... NOT something that's under my control. Correct?

[rg305]

To whomever controls the [Palo Alto] firewall.

[tcbishop]

Thanks ya'll! Much appreciated. I'll send them the above link.
Cheers
Tom

[rg305]

Cheers from Miami
and Happy New Year!