Certbot failed to authenticate some domains (authenticator: webroot)

The quickest way to test whether the ACME challenge is being affected by the Cloudflare proxy is to pause Cloudflare.

My testing discovered that you are blocking certain user agents via Cloudflare.

When using curl -Iiv http://www.abidefurniture.net/ the response was HTTP/1.1 403 Forbidden

Visiting from a web browser loaded the site, so I figured it was worth trying curl with the user agent from my web browser.

Using curl -H "User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" -Iiv http://www.abidefurniture.net/ returns a HTTP/1.1 301 Moved Permanently to Location: https://www.abidefurniture.net/

You need to get that worked out before you can move along to whatever else may be configured in an manner.

... is sounding like a really good idea.

4 Likes