Certbot failed to authenticate some domains (authenticator: webroot)

Help
1

I ran this command: sudo certbot certonly --webroot -w /home/svr.your-website-preview.co.za -d patrick-hove-construction.co.za

It produced this output:

Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: patrick-hove-construction.co.za
Type: unauthorized
Detail: Invalid response from http://patrick-hove-construction.co.za/.well-known/acme-challenge/Fw82lb1caACu7qnPZN-n1_x1_Cih1VNdql7gfeIjqQY: 4

My web server is (include version):

LiteSpeed/1.8.3 Open (BUILD built: Tue Apr 15 23:41:20 UTC 2025)
module versions:
lsquic 4.2.0
modgzip 1.1
cache 1.66
mod_security 1.4 (with libmodsecurity v3.0.13)

The operating system my web server runs on is (include version):
Ubuntu 22.04.5 LTS

I can login to a root shell on my machine (yes or no, or I don't know):
Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
Yes

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 1.21.0

1 Like
2

Welcome @tomatoeGuy

First, you have an AAAA record in your DNS but connections using IPv6 don't work. You should either correct your IPv6 config or remove the AAAA record from the DNS. It is not causing this particular problem but can cause other problems. If you correct your IPv6 make sure to periodically test it to ensure it is working. One way is with: https://letsdebug.net

As for the "Invalid response" error ... I assume the error code on the end of the message was 404. Some of the msg was truncated.

This means your -w folder does not match the DocumentRoot in your LiteSpeed server that processes HTTP requests for that domain name.

I see you got a certificate yesterday. And, your LiteSpeed server is using it for HTTPS connections. What changed between yesterday and today? And, why do you need another cert today when you already have one?

4 Likes
3

I was setting this up for email, snappymail.

4

whole thing got messed up after i placed the website on google

5

Whats strange is that when i log into google my business website is https and when i log out it show http

6

I don't know what you mean by that. But, you still have an AAAA record in your DNS for this domain name. And, IPv6 connections using that address still fail. If you don't have a way to reliably test IPv6 you should remove the AAAA record.

See: SSL Server Test: patrick-hove-construction.co.za (Powered by Qualys SSL Labs)

Your DNS

patrick-hove-construction.co.za. 0 IN A 161.97.69.237
patrick-hove-construction.co.za. 0 IN AAAA 2a02:c207:2243:9511::1

Both of these IP addresses are for Contabo. You just don't have the correct IPv6 address or something else in your config needs correcting for IPv6. You may wish to speak with Contabo about that.

Once you get this sorted some or even all of your other problems will go away.

2 Likes
7

Alright thanks, I should only have one IP address for associated with that domain name. Its a domain I purchased from truehost.