Erro in obtain a new certificate 404 unauthorized

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:cchx.com.br

I run this commands: ./letsencrypt-auto certonly --dry-run --webroot -w /etc/letsencrypt/live/ -d webamil.cchx.com.br -d cchx.com.br
and below
./letsencrypt-auto certonly --dry-run --standalone -d webamil.cchx.com.br -d cchx.com.br

It produced this output: The following errors were reported by the server:

domain: webmail.cchx.com.br
Type : unauthorized
Detail: Invalid response from http://webmail.cchx.com.br/acme-challenge/.....
Status : 404 - Not Found

My web server is (include version):nginx zimbra mail 8.8.15

The operating system my web server runs on is (include version):CentOS 7

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):certbot 1.9.0

1 Like
2

Hi @ccharleaux

that's wrong.

Check http://webmail.cchx.com.br/acme-challenge/1234 - there is a Tomcat.

Please check the documentation of your Tomcat to find the correct webroot.

1 Like
3

My tomcat is webserver of the domain cchx.com.br stay in other server with slackware and tomcat, but my webmail.cchx.com.br is other server with nginx

image
image804×710 158 KB

1 Like
4

Please click the link. There answers a Tomcat:

HTTP Status 404 – Not Found

Type Status Report

Message /acme-challenge/1234

Description The origin server did not find a current representation for the target resource or is not willing to disclose that one exists.

Apache Tomcat/9.0.12

PS:

If the two domains are running on different machines, normally you can't create one certificate with both domain names via http validation (it's possible with redirects, but not directly).

1 Like
5

I understand you, but i use reverse proxy and I configure for security to disclose another webserver, as I would do for redirects ?

1 Like
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.