Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA. Second virtual host

Hi,

I have 2 virtual hosts with 2 domains on 1 database running Ubuntu 16.04 on Apache2 LAMP stack.

My first domain www.benjaminthompson.org already has a certificate. My Postfix is encrypted aswell.

Now I want to encrypt my second domain www.a-c-d.net.

I run:

sudo add-apt-repository ppa:certbot/certbot

sudo apt-get update

sudo apt-get install python-certbot-apache

sudo certbot --apache --cert-name benjaminthompson.org -d benjaminthompson.org -d www.benjaminthompson.org -d www.a-c-d.net -d www.a-c-d.net -d a-c-d.net

And get:

Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.

How do I work around this to get a certificate on my second domain?

Any help will be greatly appreciated, thanks !!

The TLS-SNI-01 validation type used by older versions of Certbot's Apache plugin is being phased out.

You need to upgrade to a newer version of Certbot, or run a slightly different command.

The Certbot PPA unfortunately doesn't have a newer version yet, so upgrading would mean switching to certbot-auto or another installation method. :slightly_frowning_face:

So I can run this command:

sudo certbot --authenticator webroot --installer apache \ --webroot-path /var/www/html -d benjaminthompson.org -d benjaminthompson.org -d www.benjaminthompson.org

And then afterwords:

sudo apt-get update

sudo apt-get install python-certbot-apache

sudo certbot --apache --cert-name benjaminthompson.org -d benjaminthompson.org -d www.benjaminthompson.org -d www.a-c-d.net -d www.a-c-d.net -d a-c-d.net

I have two webroot paths to each virtual host.

Thanks again

When I run:

sudo certbot --authenticator webroot --installer apache \ --webroot-path /var/www/html -d benjaminthompson.org -d benjaminthompson.org -d www.ben jaminthompson.org

I get:

certbot: error: unrecognized arguments: --webroot-path /var/www/html/

So I tried:

sudo certbot --authenticator webroot --installer apache \ --webroot-path /var/www/html/a-c-d.net/public_html -d benjaminthompson.org -d benjaminthompson.org -d www.benjaminthompson.org -d www.a-c-d.net -d www.a-c-d.net -d a-c-d.net

And get:

certbot: error: unrecognized arguments: --webroot-path /var/www/html/a-c-d.net/public_html

What path is the correct path?

Thanks

The backslash isn’t part of the command; it’s used in the example to split the command across two lines, but if you’re entering it on one line you should omit the backslash.

Thanks!

I run:

sudo certbot --authenticator webroot --installer apache --webroot-path /var/www/html/a-c-d.net/public_html -d www.a-c-d.net -d www.a-c-d.net -d a-c-d.net

And get:

IMPORTANT NOTES:
 - The following errors were reported by the server:

 Domain: a-c-d.net
 Type:   unauthorized
 Detail: Invalid response from
 http://a-c-d.net/.well-known/acme-
 challenge/_VzPwvkduCqxsgf41rtPiivrYrXo23jojAAYwVX0rr4:
 "
 <!DOCTYPE html>
 <html lang="en-US" prefix="og: http://ogp.me/ns#">

 <head>
               <meta charset="UTF-8" />
       <!-- wp_head -->
       <scrip"

  To fix these errors, please make sure that your domain name was
  entered correctly and the DNS A/AAAA record(s) for that domain
  contain(s) the right IP address.

My DNS records are set correct.

I’m in doubt if my second virtual host is correct.

My second virtual host:

<VirtualHost *:80>
            ServerName www.a-c-d.net
            DocumentRoot /var/www/html/a-c-d.net/public_html
          </VirtualHost>
         <VirtualHost *:80>
          ServerAlias a-c-d.net
          </VirtualHost>

All help is greatly appreciated, thanks!

I suspect it should probably be:

<VirtualHost *:80>
  ServerName www.a-c-d.net
  ServerAlias a-c-d.net
  DocumentRoot /var/www/html/a-c-d.net/public_html
</VirtualHost>

Worked perfectly, thanks so much, really appreciate it !!!

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.