Error due getting SSL certificate

Help
1

Hello everyone!
I ran sudo certbot --apache and have this
Requesting a certificate for the1one1.ru

Certbot failed to authenticate some domains (authenticator: apache). The Certifi cate Authority reported these problems:
Domain: the1one1.ru
Type: unauthorized
Detail: 5.180.172.207: Invalid response from http://the1one1.ru/.well-known/ac me-challenge/dq-RRZuurxVWhTKjdt3HFdtqkAQEZ5o3LaiN4Hfakcw: 404

Hint: The Certificate Authority failed to verify the temporary Apache configurat ion changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See t he logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for mo re details.

my virtualhost:
<VirtualHost *:80>
ServerName the1one1.ru
ServerAlias the1one1.ru
ServerAdmin xxxx@xxxx.com
DocumentRoot /var/www/empty

 Alias /.well-known/acme-challenge/ /var/www/empty/.well-known/acme-challenge/
<Directory "/var/www/empty/.well-known/acme-challenge/">
         Options None
         AllowOverride None
         ForceType text/plain
         RedirectMatch 404 "^(?!/\.well-known/acme-challenge/[\w-]{43}$)"
</Directory>

 RewriteEngine on
 RewriteCond %{REQUEST_URI} !^/\.well-known
 RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [R]

 CustomLog ${APACHE_LOG_DIR}/chat.access.log combined
 ErrorLog ${APACHE_LOG_DIR}/chat.error.log

What should i do to fix it?

2

(post deleted by author)

3

I have recommendations for changes to your VirtualHost. But, before that would you explain why an nginx server replies to requests to your domain. That Apache server is not responding.

We know this from the response headers to an HTTP request

Request to: the1one1.ru/5.180.172.207, Result: [Address=5.180.172.207,Address Type=IPv4,Server=nginx/1.29.3

3 Likes
4

I don't know why maybe something with dns please look at screenshot

5

@Den It is up to you to configure your system correctly. If your plan is to use Apache then you need to find out why nginx is responding instead. You did not even answer many of the questions on the form you were shown for me to make some specific suggestions.

It is not just Let's Encrypt affected. Anyone making requests to your domain are getting a reply from nginx.

An HTTPS request to your domain uses an invalid cert. But, ignoring that it shows this from a system running nginx. You should focus on why this is happening

curl -ik https://the1one1.ru

HTTP/1.1 200 OK
Server: nginx/1.29.3
ETag: "6915d912-1992"
Expires: Mon, 15 Dec 2025 16:45:43 GMT

<!doctype html>
<html>
<head>
    <meta charset="utf-8">
    <title>FASTPANEL HOSTING CONTROL</title>
4 Likes
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.