# "Error getting validation data" **URL:** \ **Category:** Help\ **Created:** [December 10, 2018, 2:31pm UTC](https://community.letsencrypt.org/t/error-getting-validation-data/79700 "2018-12-10T14:31:44Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Rackover](https://avatars.discourse-cdn.com/v4/letter/r/9de053/32.png) [@Rackover](https://community.letsencrypt.org/u/Rackover)\ **Post date:** [December 10, 2018, 2:31pm UTC](https://community.letsencrypt.org/t/error-getting-validation-data/79700/1 "2018-12-10T14:31:44Z")
My domain is: [racknet.noip.me](http://racknet.noip.me) I ran this command: `sudo certbot --apache` It produced this output: > rackover@rackover-CHADNET:~/APACHE2/gameservices⟫ sudo certbot --apache > Saving debug log to /var/log/letsencrypt/letsencrypt.log > Plugins selected: Authenticator apache, Installer apache > > Which names would you like to activate HTTPS for? > > * * * > > 1: [racknet.noip.me](http://racknet.noip.me) > > * * * > > Select the appropriate numbers separated by commas and/or spaces, or leave input > blank to select all options shown (Enter 'c' to cancel): 1 > Cert is due for renewal, auto-renewing... > Renewing an existing certificate > Performing the following challenges: > tls-sni-01 challenge for [racknet.noip.me](http://racknet.noip.me) > Waiting for verification... > Cleaning up challenges > Failed authorization procedure. [racknet.noip.me](http://racknet.noip.me) (tls-sni-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Error getting validation data > > IMPORTANT NOTES: > > - The following errors were reported by the server: The operating system my web server runs on is (include version): > Distributor ID: Ubuntu > Description: Ubuntu 16.04.5 LTS > Release: 16.04 > Codename: xenial I can login to a root shell on my machine (yes or no, or I don't know): Yes ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [December 10, 2018, 2:49pm UTC](https://community.letsencrypt.org/t/error-getting-validation-data/79700/2 "2018-12-10T14:49:47Z")
Hi @Rackover > [@Rackover](#): > > Failed authorization procedure. [racknet.noip.me](http://racknet.noip.me) (tls-sni-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Error getting validation data the tls-sni-01 - validation is deprecated, support ends 2019-02-13. > [@March 13, 2019: End-of-Life for All TLS-SNI-01 Validation Support](https://community.letsencrypt.org/t/february-13-2019-end-of-life-for-all-tls-sni-01-validation-support/74209): > > L… So you should change your validation method. Try ```nohighlight sudo certbot --apache --preferred-challenges http ``` ---
**Author:** ![Rackover](https://avatars.discourse-cdn.com/v4/letter/r/9de053/32.png) [@Rackover](https://community.letsencrypt.org/u/Rackover)\ **Post date:** [December 10, 2018, 2:51pm UTC](https://community.letsencrypt.org/t/error-getting-validation-data/79700/3 "2018-12-10T14:51:56Z")
Hi, thanks for your reply. It does not work neither, but at least the error is different. > 1 rackover@rackover-CHADNET:/etc/apache2⟫ sudo certbot --apache --preferred-challenges http > Saving debug log to /var/log/letsencrypt/letsencrypt.log > Plugins selected: Authenticator apache, Installer apache > > Which names would you like to activate HTTPS for? > > * * * > > 1: [racknet.noip.me](http://racknet.noip.me) > > * * * > > Select the appropriate numbers separated by commas and/or spaces, or leave input > blank to select all options shown (Enter 'c' to cancel): 1 > Obtaining a new certificate > Performing the following challenges: > http-01 challenge for [racknet.noip.me](http://racknet.noip.me) > Waiting for verification... > Cleaning up challenges > Failed authorization procedure. [racknet.noip.me](http://racknet.noip.me) (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from [http://racknet.noip.me/.well-known/acme-challenge/d\_Wo10oO\_5A8Iw3oXaVlxDBojZcsBtFMTGMie9YnTDM:](http://racknet.noip.me/.well-known/acme-challenge/d_Wo10oO_5A8Iw3oXaVlxDBojZcsBtFMTGMie9YnTDM:) "\n\n404 Not Found\n\n > > # Not Found > \n\ > IMPORTANT NOTES: > > - The following errors were reported by the server: ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [December 10, 2018, 2:57pm UTC](https://community.letsencrypt.org/t/error-getting-validation-data/79700/4 "2018-12-10T14:57:02Z")
> [@Rackover](#): > > Failed authorization procedure. [racknet.noip.me](http://racknet.noip.me) (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from [http://racknet.noip.me/.well-known/acme-challenge/d\_Wo10oO\_5A8Iw3oXaVlxDBojZcsBtFMTGMie9YnTDM:](http://racknet.noip.me/.well-known/acme-challenge/d_Wo10oO_5A8Iw3oXaVlxDBojZcsBtFMTGMie9YnTDM:) “\n\n404 Not Found\n\n Your main configuration * * * | Domainname | Http-Status | redirect | Sec. | G | | --- | --- | --- | --- | --- | | • [http://racknet.noip.me/](http://racknet.noip.me/) | | | | | | 78.224.198.110 | 302 | [http://racknet.noip.me/portal.php](http://racknet.noip.me/portal.php) | 0.163 | D | | | | | | | | • [http://racknet.noip.me/portal.php](http://racknet.noip.me/portal.php) | 200 | | 4.294 | H | | | | | | | | • [https://racknet.noip.me/](https://racknet.noip.me/) | | | | | | 78.224.198.110 | -14 | | 10.023 | T | | Timeout - The operation has timed out | | | | | | | | | | | | • [http://racknet.noip.me/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de](http://racknet.noip.me/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de) | | | | | | 78.224.198.110 | 404 | | 0.147 | A | | Not Found | | | | | | | | | | | * * * looks ok. So you have redirects. Check your apache config to find your webroot / DocumentRoot. Then create a file (file name 1234) in `/yourwebroot/.well-known/acme-challenge` and try to load this file via ```nohighlight http://racknet.noip.me/.well-known/acme-challenge/1234 ``` If this works, you have your correct webroot. So use ```nohighlight certbot run -a webroot -i apache -w yourWebRoot -d yourdomain.com ``` ---
**Author:** ![Rackover](https://avatars.discourse-cdn.com/v4/letter/r/9de053/32.png) [@Rackover](https://community.letsencrypt.org/u/Rackover)\ **Post date:** [December 10, 2018, 3:04pm UTC](https://community.letsencrypt.org/t/error-getting-validation-data/79700/5 "2018-12-10T15:04:27Z")
Thank you, it works 🙂 ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [January 9, 2019, 3:04pm UTC](https://community.letsencrypt.org/t/error-getting-validation-data/79700/6 "2019-01-09T15:04:29Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.