Challenge uses wrong IP

Help
1

it seems that LE has an error in DNS-Resolution for shop.appstro.de
Its IP is 78.46.192.65 but LE seems to use 23.227.38.65

My domain is:

I ran this command:
certbot -d shop.appstro.de
It produced this output:

  • The following errors were reported by the server:

    Domain: shop.appstro.de
    Type: unauthorized
    Detail: 23.227.38.65: Invalid response from
    https://braustuberl.de/: "\n<html class="no-js
    overflow-x-hidden" lang="de">\n \n\t\n\t\n\n\t<!-- /Added by "

2

Incorrect analysis and conclusion.

See the output:

Notice the https://www.braustuberl.de/ part? Your hostname shop.appstro.de redirects to that URL.

2 Likes
3

Hallo Steffen,

You're running Apache Coyote 1.1 on shop.appstro.de port 80. This is returning a redirect to https://www.braustuberl.de for every single request, including those for ACME challenges:

$ curl -D - http://shop.appstro.de/
HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Location: https://www.braustuberl.de
Content-Length: 0
Date: Sat, 29 Nov 2025 10:39:20 GMT

and

$ curl -D - http://shop.appstro.de/.well-known/acme-challenge/test
HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Location: https://www.braustuberl.de
Content-Length: 0
Date: Sat, 29 Nov 2025 10:41:27 GMT

It's www.braustuebel.de that has IP address 23.227.38.65.

Let's Encrypt's verifier is following those redirects but is not then getting the answer that it's expecting. Have a look at your Coyote configuration and remove the redirect to https://www.braustuberl.de/

3 Likes
4

Thanks, i thoughti already did that.

5

IMPORTANT NOTES:

  • Congratulations! Your certificate and chain have been saved at:
    /etc/letsencrypt/live/shop.appstro.de/fullchain.pem
    Your key file has been saved at:
    /etc/letsencrypt/live/shop.appstro.de/privkey.pem
3 Likes
6

image
image578×156 4.97 KB