Hi!
I spent som time trying to get certificate (difrent apache virtualhosts configurations ) but without success.
finnaly i made clean instalation ubuntu 18 , just install Apache2 (all defaults and standard start page /var/www/html/index.html) and then started certboot procedure to gain certificate, but still without success
. What is wrong ?
My domain is: got-wyn.nazwa.pl
I ran this command:
root@got-wyn:~# sudo certbot --apache
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Enter email address (used for urgent renewal and security notices) (Enter ‘c’ to
cancel): gotwyniki@wp.pl
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
agree in order to register with the ACME server at
https://acme-v02.api.letsencrypt.org/directory
(A)gree/©ancel: a
Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let’s Encrypt project and the non-profit
organization that develops Certbot? We’d like to send you email about our work
encrypting the web, EFF news, campaigns, and ways to support digital freedom.
(Y)es/(N)o: y
No names were found in your configuration files. Please enter in your domain
name(s) (comma and/or space separated) (Enter ‘c’ to cancel): got-wyn.nazwa.pl
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for got-wyn.nazwa.pl
Enabled Apache rewrite module
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. got-wyn.nazwa.pl (http-01): urn:ietf:params:acme :error:caa :: CAA record for got-wyn.nazwa.pl prevents issuance
IMPORTANT NOTES:
-
The following errors were reported by the server:
Domain: got-wyn.nazwa.pl
Type: None
Detail: CAA record for got-wyn.nazwa.pl prevents issuance -
Your account credentials have been saved in your Certbot
configuration directory at /etc/letsencrypt. You should make a
secure backup of this folder now. This configuration directory will
also contain certificates and private keys obtained by Certbot so
making regular backups of this folder is ideal.
My web server is (Apache/2.4.29 (Ubuntu)):
The operating system my web server runs on is (ubuntu 18:
My hosting provider, if applicable, is:
it is VPS on nazwa.pl
I can login to a root shell on my machine (yes ):
I’m using a control panel to manage my site (no):
The version of my client is (certbot 0.28.0):
I paste part of Log (new users can’t upload attachements and are limited text length):
…
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 1433
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Fri, 22 Feb 2019 16:45:55 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 22 Feb 2019 16:45:55 GMT
Connection: keep-alive
{
“identifier”: {
“type”: “dns”,
“value”: “got-wyn.nazwa.pl”
},
“status”: “invalid”,
“expires”: “2019-03-01T16:45:48Z”,
“challenges”: [
{
“type”: “tls-alpn-01”,
“status”: “invalid”,
“url”: “https://acme-v02.api.letsencrypt.org/acme/challenge/CvOVdtLwAM3C7Lj9o87ajZ6S1DjtyrP8SyU9dDYPiEg/12873917732”,
“token”: “_7LE2-64H2Y8K0cMNyE-cYtYu28KO2NwPWzhjbZHEQk”
},
{
“type”: “http-01”,
“status”: “invalid”,
“error”: {
“type”: “urn:ietf:params:acme:error:caa”,
“detail”: “CAA record for got-wyn.nazwa.pl prevents issuance”,
“status”: 403
},
“url”: “https://acme-v02.api.letsencrypt.org/acme/challenge/CvOVdtLwAM3C7Lj9o87ajZ6S1DjtyrP8SyU9dDYPiEg/12873917734”,
“token”: “ze1agA-6d0CzN2rpWHf4vBZKXPww1aAwQhSs1euHF1o”,
“validationRecord”: [
{
“url”: “http://got-wyn.nazwa.pl/.well-known/acme-challenge/ze1agA-6d0CzN2rpWHf4vBZKXPww1aAwQhSs1euHF1o”,
“hostname”: “got-wyn.nazwa.pl”,
“port”: “80”,
“addressesResolved”: [
“77.55.212.127”
],
“addressUsed”: “77.55.212.127”
}
]
},
{
“type”: “dns-01”,
“status”: “invalid”,
“url”: “https://acme-v02.api.letsencrypt.org/acme/challenge/CvOVdtLwAM3C7Lj9o87ajZ6S1DjtyrP8SyU9dDYPiEg/12873917736”,
“token”: “2gTiOc81UCmYyYAiOdUbGCyO4xGUF01vhuOOTWzrT8U”
}
]
}
2019-02-22 17:45:55,584:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:
Domain: got-wyn.nazwa.pl
Type: None
Detail: CAA record for got-wyn.nazwa.pl prevents issuance
2019-02-22 17:45:55,585:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/certbot/auth_handler.py”, line 82, in handle_authorizations
self._respond(aauthzrs, resp, best_effort)
File “/usr/lib/python3/dist-packages/certbot/auth_handler.py”, line 161, in _respond
self._poll_challenges(aauthzrs, chall_update, best_effort)
File “/usr/lib/python3/dist-packages/certbot/auth_handler.py”, line 232, in _poll_challenges
raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. got-wyn.nazwa.pl (http-01): urn:ietf:params:acme:error:caa :: CAA record for got-wyn.nazwa.pl prevents issuance