Configurar Certificado let's no Gitlab-CE

Estou atualmente no processo de configurar um certificado para o meu GitLab-CE, mas estou enfrentando um erro. Gostaria de saber se alguém poderia me fornecer informações sobre a possível causa desse erro e oferecer orientações sobre como resolvê-lo.

Segue erro no Linux - Ubuntu

example@gitlabsinc:~$ sudo certbot certonly --standalone -d gitlabsinc.exemple.net.br
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for gitlabsinc.exemple.net.br

Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
Domain: gitlabsinc.exemple.net.br
Type: dns
Detail: DNS problem: NXDOMAIN looking up A for gitlabsinc.exemple.net.br - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for gitlabsinc.exemple.net.br - check that a DNS record exists for this domain

Hint: The Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on port 80. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

The domain name exemple.net.br doesn't seem to be registered. Not sure if it's even possible to register that domain name.

Let's Encrypt can only issue certificates for hostnames in the public DNS, not for private domains.

3 Likes

Boa tarde

Eu mudei o nome colocando example.

mais seria gitlabsinc.wmp.net.br

The subdomain gitlabsinc does not exist. See e.g. gitlabsinc.wmp.net.br | DNSViz.

For the --standalone plugin to work, the hostname is required to have an IP address associated with it in DNS, e.g. an A record for IPv4 and/or an AAAA record for IPv6.

2 Likes

Bom dia, tenho um endereço de IP no meu AD com Registro A ,

Mais não estou tendo sucessso ao criar.

O DNS no seu AD atende à Internet?


Does the DNS in your AD serve the Internet?
3 Likes

Estou com um problema que não sei mais oq fazer

Erro que aparesenta ao rodar o comando certbot certonly --standalone -d repositorioc.walter.net ou certbot certonly --webroot -w /opt/gitlab/embedded/html -d repositorioc.walter.net






certbot certonly --standalone -d repositorioc.walter.net

walter@repositorioc:~$ sudo certbot certonly --standalone -d repositorioc.walter.net
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for repositorioc.walter.net

Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
Domain: repositorioc.walter.net
Type: unauthorized
Detail: 50.116.86.29: Invalid response from http://repositorioc.walter.net/.well-known/acme-challenge/Fx9WOwyPcOVLxTVJ0jbitf4yAznJFTWbuafchySjFxY: 404

Hint: The Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on port 80. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.


certbot certonly --webroot -w /opt/gitlab/embedded/html -d repositorioc.walter.net

walter@repositorioc:~$ sudo certbot certonly --webroot -w /opt/gitlab/embedded/html -d repositorioc.walter.net
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for repositorioc.walter.net

Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: repositorioc.walter.net
Type: unauthorized
Detail: 50.116.86.29: Invalid response from http://repositorioc.walter.net/.well-known/acme-challenge/YiZtKy8h8_YMV0RJ3NgqI60oal-5oWSsIp9-LWj_Qz8: 404

Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
Enviei uns print do log do lets encrypt como jpg