Challenge Failed - Unauthorized - Invalid Response

[muz]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: geovision.nz, IP 52.65.83.229

I ran this command from my Putty Client: $ sudo ./certbot-auto certonly --webroot -w /opt/bitnami/apps/wordpress/htdocs/ -d www.geovision.nz -d geovision.nz

It produced this output: Challenge Failed - Unauthorized - Invalid Response. - I can provide jpg screen shot but how do I seen to you??

My web server is (include version): latest Apache

The operating system my web server runs on is (include version): Bitnami Wordpress lightsail instance. - Latest version.

My hosting provider, if applicable, is: AWS Bitnami Wordpress lightsail instance

I can login to a root shell on my machine (yes or no, or I don’t know): yes via putty

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Wordpress Dashboard

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot-auto - Latest version

[9peppe]

@muz

bitnami

https://docs.bitnami.com/general/faq/administration/generate-configure-certificate-letsencrypt/

You shouln't have installed certbot on that machine.

[_az]

For Bitnami, try using the instructions at https://docs.bitnami.com/general/how-to/generate-install-lets-encrypt-ssl/ instead of using Certbot. They tend to be a bit more straightforward.

[muz]

Hi, Thanks for your prompt feedback. The reason I used Certbot was because I have a number of other AWS Bitnami Lightsail sites currently working fine with it. It is just this “challenge fail” that is causing the problem. Is there a way of identifying the reason the domain appears invalid? Thanks.

[_az]

@muz

Is there a way of identifying the reason the domain appears invalid?

Well, the immediate reason would be that your webserver is intercepting the challenge requests and serving a totally unrelated page with an HTTP 200. For example, try visiting http://geovision.nz/.well-known/acme-challenge/xx

Only you know how your webserver is setup so it's hard to say exactly why it behaves this way, but one could guess that you need to exclude /.well-known/acme-challenge from whatever is causing the requests to always go to that page.

[muz]

Thanks for your quick response. Are you suggesting I should use the “bncert-tool” or the manual method?

[9peppe]

That depends on your needs, the bitnami documentation should contain your answer.