Bonjour,
je tente de configurer moi même apache en https. J'ai un nom de domaine qui pointe vers mon ip publique ipv4 et ipv6. Dans ma zone dns je n'avais pas de dns AAAA, j'en ai créé un en indiquant mon adresse ipv6, je ne sais pas si c'est correct, ça me semble bizarre. Quand je rentre mon ipv4 dans le navigateur je tombe bien sur mon site. www.eveil.site ne renvoie rien...
Merci pour vos réponses, en ce dimanche
Je peux lire des réponses en Anglais : oui
Mon nom de domaine est : eveil.site
J’ai exécuté cette commande : sudo certbot --apache
Elle a produit cette sortie : Error reading HTTP response body: reader size limit exceeded
Mon serveur Web est (inclure la version) : apache 2.4.68
Le système d’exploitation sur lequel mon serveur Web s’exécute est (version incluse) : raspberryos
Mon hébergeur, le cas échéant, est : auto hébergé
Je peux me connecter à un shell root sur ma machine (oui ou non, ou je ne sais pas) : oui
J’utilise un panneau de configuration pour gérer mon site (non, ou fournit le nom et la version du panneau de configuration) : non
@cedricguillouet, welcome to the community! 
Where is the IP address 2a01:e0a:af9:67f0:7e5:cc66:4249:3ca8 coming from?
Is it visible on the output of the command :ip -6 addr show scope global | grep inet6 ?
If yes, is the IP address opened for inbound connection of HTTP/HTTPS protocol in the router?
and while IPv6 doesn't do NAT it doesn't mean your router aren't running firewall for it, so you'll need to make a rule on router to open port 80/443 for your PI's IPv6 address
You used the --apache option but an openresty server is handling at least some of this request. Looks like OVHcloud is processing the initial request to your domain. Once you get a cert do you know how this OVH front end will handle an HTTPS request? Does it also need a cert so it can process the HTTPS
The error is because cert HTTP Challenge requests are being redirected by that openresty to your home page which is a much larger response than appropriate for an HTTP Challenge.
Examples below are for IPv4 because your IPv6 is not working. Let's Encrypt is falling back to IPv4 and gets these responses
curl -i4 http://eveil.site/.well-known/acme-challenge/Test404
HTTP/1.1 302 Moved Temporarily
server: openresty
content-length: 142
location: http://www.eveil.site/.well-known/acme-challenge/Test404
x-iplb-request-id: 36C52736:C902_D5BA2105:0050_6ACB8AB9_B0893D82:1ADB5
x-iplb-instance: 52193
# Following the redirect to www redirects to your home page
curl -i4 http://www.eveil.site/.well-known/acme-challenge/Test404
HTTP/1.1 302 Moved Temporarily
server: openresty
content-length: 142
location: http://www.eveil.site
x-iplb-request-id: 36C52736:C3C8_D5BA2105:0050_6ACB8ACF_B0897D03:1ADB5
x-iplb-instance: 52193
#
curl -i4 http://www.eveil.site
HTTP/1.1 200 OK
server: openresty
content-type: text/html; charset=utf8
content-length: 13878
x-iplb-request-id: 36C52736:CC5C_D5BA2105:0050_6ACB8AD8_B0380947:18FD52
x-iplb-instance: 52243
ip -6 addr show scope global | grep inet6
inet6 2a01:e0a:af9:67f0:fa86:9ff:cefd:d28a/64 scope global temporary dynamic
inet6 2a01:e0a:af9:67f0:740f:a655:d45f:dbc4/64 scope global dynamic mngtmpaddr noprefixroute
thanks for your replies.
I made rules to open port 80/443 on the firewall of the PI
The redirection is made on the router for the same port.
There was bad redirection on the ovh's configuration.
In the dns zone, there was A adress but not with my ip, i put that.
I've made a name server with my ip but it was wrong thing.
Excuse my english.
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: eveil.site
Type: unauthorized
Detail: 2a01:e0a:af9:67f0:fa86:9ff:cefd:d28a: Invalid response from http://eveil.site/.well-known/acme-challenge/-Rhf6vn9DRRS6LMfw5fP26p-knh-zf69T2BSktQC-GE: 404
Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
You may want to have a look at this: