Certbot fails with "Certbot failed to authenticate some domains"

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version): my.dev.stackmate.app

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: ubuntu

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 2.5.0

image
image1223×116 6.46 KB

2

if you want to use http-01 challenge you need to use port 80. while .app dns zone is HSTS preloaded for browsers, acme server does not care.

iirc domain in the Pic : my.dev.stackmate.app

3 Likes
3

See also

1 Like
4

I made the change but I keep getting the same error.

image
image1878×880 38.1 KB

5

What change did you make?
I see:

curl -Ii my.dev.stackmate.app
curl: (56) Recv failure: Connection reset by peer
3 Likes
6

Hello

similar issue here for mail.mydomain.it:

Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
  Domain: admin.mail.mydomain.it
  Type:   unauthorized
  Detail: 2a01:4f8:c17:1fe5::1: Invalid response from https://admin.mail.mydomain.it/index.php: "<!DOCTYPE html>\n<html lang=\"it-IT\">\n<head>\n\t<meta charset=\"UTF-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial"

  Domain: autoconfig.mail.mydomain.it
  Type:   unauthorized
  Detail: 2a01:4f8:c17:1fe5::1: Invalid response from https://autoconfig.mail.mydomain.it/index.php: "<!DOCTYPE html>\n<html lang=\"it-IT\">\n<head>\n\t<meta charset=\"UTF-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial"

  Domain: autodiscover.mail.mydomain.it
  Type:   unauthorized
  Detail: 2a01:4f8:c17:1fe5::1: Invalid response from https://autodiscover.mail.mydomain.it/index.php: "<!DOCTYPE html>\n<html lang=\"it-IT\">\n<head>\n\t<meta charset=\"UTF-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial"

  Domain: mail.mail.mydomain.it
  Type:   unauthorized
  Detail: 2a01:4f8:c17:1fe5::1: Invalid response from https://mail.mail.mydomain.it/index.php: "<!DOCTYPE html>\n<html lang=\"it-IT\">\n<head>\n\t<meta charset=\"UTF-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial"

  Domain: webmail.mail.mydomain.it
  Type:   unauthorized
  Detail: 2a01:4f8:c17:1fe5::1: Invalid response from https://webmail.mail.mydomain.it/index.php: "<!DOCTYPE html>\n<html lang=\"it-IT\">\n<head>\n\t<meta charset=\"UTF-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial"

  Domain: www.mail.mydomain.it
  Type:   unauthorized
  Detail: 2a01:4f8:c17:1fe5::1: Invalid response from https://www.mail.mydomain.it/index.php: "<!DOCTYPE html>\n<html lang=\"it-IT\">\n<head>\n\t<meta charset=\"UTF-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial"

Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.



Certbot failed to authenticate some domains (authenticator: manual). The Certificate Authority reported these problems:
  Domain: admin.mail.mydomain.it
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.admin.mail.mydomain.it - check that a DNS record exists for this domain

  Domain: autoconfig.mail.mydomain.it
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.autoconfig.mail.mydomain.it - check that a DNS record exists for this domain

  Domain: autodiscover.mail.mydomain.it
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.autodiscover.mail.mydomain.it - check that a DNS record exists for this domain

  Domain: mail.mail.mydomain.it
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.mail.mail.mydomain.it - check that a DNS record exists for this domain

  Domain: webmail.mail.mydomain.it
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.webmail.mail.mydomain.it - check that a DNS record exists for this domain

  Domain: www.mail.mydomain.it
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.www.mail.mydomain.it - check that a DNS record exists for this domain

Hint: The Certificate Authority failed to verify the DNS TXT records created by the --manual-auth-hook. Ensure that this hook is functioning correctly and that it waits a sufficient duration of time for DNS propagation.

I don't understand where the problem is. Can you help in troubleshooting please?

Thank you.

7

Not very similar.

Please start a new thread. You will be shown a form. Please answer the questions as best you can.

5 Likes
8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.