# Error when renewing certificate on CWP **URL:** \ **Category:** Server\ **Created:** [July 30, 2017, 5:11am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154 "2017-07-30T05:11:45Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![pmc2010](https://avatars.discourse-cdn.com/v4/letter/p/d2c977/32.png) [@pmc2010](https://community.letsencrypt.org/u/pmc2010)\ **Post date:** [July 30, 2017, 5:11am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/1 "2017-07-30T05:11:45Z")
I received a notice that my ssl certificates were going to expire. I tried to renew them in CWP, but I am getting the following error message: Failed authorization procedure. [bettysantlermix.com](http://bettysantlermix.com) (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from [http://bettysantlermix.com/.well-known/acme-challenge/\_2fTBt7iu1vld50MKKy7\_n6Khj7P25MRxxXhOg6m9YM:](http://bettysantlermix.com/.well-known/acme-challenge/_2fTBt7iu1vld50MKKy7_n6Khj7P25MRxxXhOg6m9YM:) " It looks like LE is unable to generate the file. I created a .well-known/acme-challenge/test.html file and I’m able to view it in my browser. I set the permissions to 755 for both the .well-known and acme-challenge folders. Any idea what else I need to do to allow the LE script to do what it needs to do? ---
**Author:** ![ahaw021](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ahaw021/32/14882_2.png) [@ahaw021](https://community.letsencrypt.org/u/ahaw021)\ **Post date:** [July 30, 2017, 5:17am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/2 "2017-07-30T05:17:03Z")
Please fill out the fields below so we can help you better. I ran this command: It produced this output: My web server is (include version): The operating system my web server runs on is (include version): My hosting provider, if applicable, is: I can login to a root shell on my machine (yes or no, or I don’t know): I’m using a control panel to manage my site (no, or provide the name and version of the control panel): ---
**Author:** ![pmc2010](https://avatars.discourse-cdn.com/v4/letter/p/d2c977/32.png) [@pmc2010](https://community.letsencrypt.org/u/pmc2010)\ **Post date:** [July 30, 2017, 5:20am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/3 "2017-07-30T05:20:22Z")
I ran this command: Install Letsencrypt for Account/Main Domain It produced this output: Failed authorization procedure. [bettysantlermix.com](http://bettysantlermix.com) (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from [http://bettysantlermix.com/.well-known/acme-challenge/\_2fTBt7iu1vld50MKKy7\_n6Khj7P25MRxxXhOg6m9YM:](http://bettysantlermix.com/.well-known/acme-challenge/_2fTBt7iu1vld50MKKy7_n6Khj7P25MRxxXhOg6m9YM:) " My web server is (include version): Apache 2.4.27 The operating system my web server runs on is (include version): CentOS Linux release 7.3.1611 (Core) My hosting provider, if applicable, is: Linode I can login to a root shell on my machine (yes or no, or I don’t know): Yes I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Yes, CWP7 ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [July 30, 2017, 6:47am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/4 "2017-07-30T06:47:52Z")
Hi @pmc2010, It looks to me like the trouble is that your web server is configured differently in IPv4 and IPv6. It answers connections on the advertised addresses 45.79.90.138 and 2600:3c01::f03c:91ff:fec8:65d9, but it returns a web application for the IPv4 address and an “It works” dummy site for the IPv6 address. Let’s Encrypt is validating on IPv6 in preference to IPv4 so it’s probably encountering the dummy site, while your browser is showing you the IPv4 version of the site. If you can configure your web server to work properly in response to IPv6 requests, the renewal should go ahead without trouble. You could also temporarily disable your IPv6 address in DNS just for the duration of the renewal if you’re finding it challenging to figure out how to configure the server to answer in IPv6 and need the certificate renewed right away. ---
**Author:** ![pmc2010](https://avatars.discourse-cdn.com/v4/letter/p/d2c977/32.png) [@pmc2010](https://community.letsencrypt.org/u/pmc2010)\ **Post date:** [July 30, 2017, 7:04am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/5 "2017-07-30T07:04:17Z")
I’m not sure that is the issue. The problem seems to be that the token file is not being created. Here is the debug output from using .acme.sh from the command line: [root@li1189-138 .acme.sh]# ./acme.sh --issue -d [bettysantlermix.com](http://bettysantlermix.com) -w /home/bpearce/public\_html --debug [Sun Jul 30 00:02:01 PDT 2017] Lets find script dir. [Sun Jul 30 00:02:01 PDT 2017] _SCRIPT_=’./acme.sh’ [Sun Jul 30 00:02:01 PDT 2017] \_script=’/root/.acme.sh/acme.sh’ [Sun Jul 30 00:02:01 PDT 2017] \_script\_home=’/root/.acme.sh’ [Sun Jul 30 00:02:01 PDT 2017] Using config home:/root/.acme.sh [https://github.com/Neilpang/acme.sh](https://github.com/Neilpang/acme.sh) v2.6.9 [Sun Jul 30 00:02:01 PDT 2017] Using api: [Sun Jul 30 00:02:01 PDT 2017] Using config home:/root/.acme.sh [Sun Jul 30 00:02:01 PDT 2017] DOMAIN\_PATH=’/root/.acme.sh/bettysantlermix.com’ [Sun Jul 30 00:02:01 PDT 2017] Le\_NextRenewTime [Sun Jul 30 00:02:01 PDT 2017] \_on\_before\_issue [Sun Jul 30 00:02:01 PDT 2017] Le\_LocalAddress [Sun Jul 30 00:02:01 PDT 2017] Check for domain=‘[bettysantlermix.com](http://bettysantlermix.com)’ [Sun Jul 30 00:02:01 PDT 2017] \_currentRoot=’/home/bpearce/public\_html’ [Sun Jul 30 00:02:01 PDT 2017] \_saved\_account\_key\_hash is not changed, skip register account. [Sun Jul 30 00:02:01 PDT 2017] Read key length: [Sun Jul 30 00:02:01 PDT 2017] \_createcsr [Sun Jul 30 00:02:01 PDT 2017] Single domain=‘[bettysantlermix.com](http://bettysantlermix.com)’ [Sun Jul 30 00:02:01 PDT 2017] Getting domain auth token for each domain [Sun Jul 30 00:02:01 PDT 2017] Getting webroot for domain=‘[bettysantlermix.com](http://bettysantlermix.com)’ [Sun Jul 30 00:02:01 PDT 2017] \_w=’/home/bpearce/public\_html’ [Sun Jul 30 00:02:01 PDT 2017] \_currentRoot=’/home/bpearce/public\_html’ [Sun Jul 30 00:02:01 PDT 2017] Getting new-authz for domain=‘[bettysantlermix.com](http://bettysantlermix.com)’ [Sun Jul 30 00:02:01 PDT 2017] Try new-authz for the 0 time. [Sun Jul 30 00:02:01 PDT 2017] url=‘[https://acme-v01.api.letsencrypt.org/acme/new-authz](https://acme-v01.api.letsencrypt.org/acme/new-authz)’ [Sun Jul 30 00:02:01 PDT 2017] payload=’{“resource”: “new-authz”, “identifier”: {“type”: “dns”, “value”: “[bettysantlermix.com](http://bettysantlermix.com)”}}’ [Sun Jul 30 00:02:01 PDT 2017] RSA key [Sun Jul 30 00:02:01 PDT 2017] GET [Sun Jul 30 00:02:01 PDT 2017] url=‘[https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)’ [Sun Jul 30 00:02:01 PDT 2017] timeout [Sun Jul 30 00:02:01 PDT 2017] \_CURL='curl -L --silent --dump-header /root/.acme.sh/http.header ' [Sun Jul 30 00:02:01 PDT 2017] ret=‘0’ [Sun Jul 30 00:02:02 PDT 2017] POST [Sun Jul 30 00:02:02 PDT 2017] url=‘[https://acme-v01.api.letsencrypt.org/acme/new-authz](https://acme-v01.api.letsencrypt.org/acme/new-authz)’ [Sun Jul 30 00:02:02 PDT 2017] \_CURL='curl -L --silent --dump-header /root/.acme.sh/http.header ' [Sun Jul 30 00:02:02 PDT 2017] \_ret=‘0’ [Sun Jul 30 00:02:02 PDT 2017] code=‘201’ [Sun Jul 30 00:02:02 PDT 2017] The new-authz request is ok. ---
**Author:** ![pmc2010](https://avatars.discourse-cdn.com/v4/letter/p/d2c977/32.png) [@pmc2010](https://community.letsencrypt.org/u/pmc2010)\ **Post date:** [July 30, 2017, 7:04am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/6 "2017-07-30T07:04:58Z")
[Sun Jul 30 00:02:02 PDT 2017] entry=’“type”:“http-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1tH1peU/1645379982",“token”:"rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYj](https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr_87n7v1Ebj7nxEE_ha-X6ju7A4OirvW1tH1peU/1645379982%22,%22token%22:%22rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYj) kl0A”’ [Sun Jul 30 00:02:02 PDT 2017] token=‘rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A’ [Sun Jul 30 00:02:02 PDT 2017] uri=‘[https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1tH1peU/1645379982](https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr_87n7v1Ebj7nxEE_ha-X6ju7A4OirvW1tH1peU/1645379982)’ [Sun Jul 30 00:02:02 PDT 2017] keyauthorization=‘rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A.1i0hOvv1TEjqv4Z6xFimwvIYZdFYAvCSGnUu9yeOgKE’ [Sun Jul 30 00:02:02 PDT 2017] dvlist=‘[bettysantlermix.com#rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A.1i0hOvv1TEjqv4Z6xFimwvIYZdFYAvCSGnUu9yeOgKE#https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1t](http://bettysantlermix.com#rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A.1i0hOvv1TEjqv4Z6xFimwvIYZdFYAvCSGnUu9yeOgKE#https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr_87n7v1Ebj7nxEE_ha-X6ju7A4OirvW1t) H1peU/1645379982#http-01#/home/bpearce/public\_html’ [Sun Jul 30 00:02:02 PDT 2017] vlist=‘[bettysantlermix.com#rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A.1i0hOvv1TEjqv4Z6xFimwvIYZdFYAvCSGnUu9yeOgKE#https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1tH](http://bettysantlermix.com#rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A.1i0hOvv1TEjqv4Z6xFimwvIYZdFYAvCSGnUu9yeOgKE#https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr_87n7v1Ebj7nxEE_ha-X6ju7A4OirvW1tH) 1peU/1645379982#http-01#/home/bpearce/public\_html,’ [Sun Jul 30 00:02:02 PDT 2017] ok, let’s start to verify [Sun Jul 30 00:02:02 PDT 2017] Verifying:bettysantlermix.com [Sun Jul 30 00:02:02 PDT 2017] d=‘[bettysantlermix.com](http://bettysantlermix.com)’ [Sun Jul 30 00:02:02 PDT 2017] keyauthorization=‘rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A.1i0hOvv1TEjqv4Z6xFimwvIYZdFYAvCSGnUu9yeOgKE’ [Sun Jul 30 00:02:02 PDT 2017] uri=‘[https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1tH1peU/1645379982](https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr_87n7v1Ebj7nxEE_ha-X6ju7A4OirvW1tH1peU/1645379982)’ [Sun Jul 30 00:02:02 PDT 2017] \_currentRoot=’/home/bpearce/public\_html’ [Sun Jul 30 00:02:02 PDT 2017] wellknown\_path=’/home/bpearce/public\_html/.well-known/acme-challenge’ [Sun Jul 30 00:02:02 PDT 2017] writing token:rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A to /home/bpearce/public\_html/.well-known/acme-challenge/rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A [Sun Jul 30 00:02:02 PDT 2017] Changing owner/group of .well-known to bpearce:bpearce [Sun Jul 30 00:02:02 PDT 2017] url=‘[https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1tH1peU/1645379982](https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr_87n7v1Ebj7nxEE_ha-X6ju7A4OirvW1tH1peU/1645379982)’ [Sun Jul 30 00:02:02 PDT 2017] payload=’{“resource”: “challenge”, “keyAuthorization”: “rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A.1i0hOvv1TEjqv4Z6xFimwvIYZdFYAvCSGnUu9yeOgKE”}’ ---
**Author:** ![pmc2010](https://avatars.discourse-cdn.com/v4/letter/p/d2c977/32.png) [@pmc2010](https://community.letsencrypt.org/u/pmc2010)\ **Post date:** [July 30, 2017, 7:05am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/7 "2017-07-30T07:05:37Z")
[Sun Jul 30 00:02:02 PDT 2017] POST [Sun Jul 30 00:02:02 PDT 2017] url=‘[https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1tH1peU/1645379982](https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr_87n7v1Ebj7nxEE_ha-X6ju7A4OirvW1tH1peU/1645379982)’ [Sun Jul 30 00:02:02 PDT 2017] \_CURL='curl -L --silent --dump-header /root/.acme.sh/http.header ' [Sun Jul 30 00:02:02 PDT 2017] \_ret=‘0’ [Sun Jul 30 00:02:02 PDT 2017] code=‘202’ [Sun Jul 30 00:02:02 PDT 2017] sleep 2 secs to verify [Sun Jul 30 00:02:04 PDT 2017] checking [Sun Jul 30 00:02:04 PDT 2017] GET [Sun Jul 30 00:02:04 PDT 2017] url=‘[https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1tH1peU/1645379982](https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr_87n7v1Ebj7nxEE_ha-X6ju7A4OirvW1tH1peU/1645379982)’ [Sun Jul 30 00:02:04 PDT 2017] timeout [Sun Jul 30 00:02:04 PDT 2017] \_CURL='curl -L --silent --dump-header /root/.acme.sh/http.header ' [Sun Jul 30 00:02:04 PDT 2017] ret=‘0’ [Sun Jul 30 00:02:04 PDT 2017] [bettysantlermix.com](http://bettysantlermix.com):Verify error:Invalid response from [http://bettysantlermix.com/.well-known/acme-challenge/rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A:](http://bettysantlermix.com/.well-known/acme-challenge/rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A:) [Sun Jul 30 00:02:04 PDT 2017] Debug: get token url. [Sun Jul 30 00:02:04 PDT 2017] GET [Sun Jul 30 00:02:04 PDT 2017] url=‘[http://bettysantlermix.com/.well-known/acme-challenge/rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A](http://bettysantlermix.com/.well-known/acme-challenge/rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A)’ [Sun Jul 30 00:02:04 PDT 2017] timeout=‘1’ [Sun Jul 30 00:02:04 PDT 2017] \_CURL=‘curl -L --silent --dump-header /root/.acme.sh/http.header --connect-timeout 1’ 404 Not Found # Not Found The requested URL /.well-known/acme-challenge/rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A was not found on this server. [Sun Jul 30 00:02:04 PDT 2017] ret='0' [Sun Jul 30 00:02:04 PDT 2017] Debugging, skip removing: /home/bpearce/public\_html/.well-known/acme-challenge/rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A [Sun Jul 30 00:02:04 PDT 2017] pid [Sun Jul 30 00:02:04 PDT 2017] No need to restore nginx, skip. [Sun Jul 30 00:02:04 PDT 2017] \_clearupdns [Sun Jul 30 00:02:04 PDT 2017] Dns not added, skip. [Sun Jul 30 00:02:04 PDT 2017] \_on\_issue\_err [Sun Jul 30 00:02:04 PDT 2017] Please add '--debug' or '--log' to check more details. [Sun Jul 30 00:02:04 PDT 2017] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh [Sun Jul 30 00:02:04 PDT 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1tH1peU/1645379982' [Sun Jul 30 00:02:04 PDT 2017] payload='{"resource": "challenge", "keyAuthorization": "rhDzXcoj28moDO7vY6PaViAGn1VI0nHeMMxFSYjkl0A.1i0hOvv1TEjqv4Z6xFimwvIYZdFYAvCSGnUu9yeOgKE"}' [Sun Jul 30 00:02:04 PDT 2017] POST [Sun Jul 30 00:02:04 PDT 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/5tqJr\_87n7v1Ebj7nxEE\_ha-X6ju7A4OirvW1tH1peU/1645379982' [Sun Jul 30 00:02:04 PDT 2017] \_CURL='curl -L --silent --dump-header /root/.acme.sh/http.header ' [Sun Jul 30 00:02:05 PDT 2017] \_ret='0' [Sun Jul 30 00:02:05 PDT 2017] code='400' [Sun Jul 30 00:02:05 PDT 2017] Diagnosis versions: ---
**Author:** ![pmc2010](https://avatars.discourse-cdn.com/v4/letter/p/d2c977/32.png) [@pmc2010](https://community.letsencrypt.org/u/pmc2010)\ **Post date:** [July 30, 2017, 7:08am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/8 "2017-07-30T07:08:46Z")
I went ahead and deleted the ipv6 A record and tried again and it still failed. It could be that the changes take some time to propagate, but I’m still not convinced that is the issue. When I pull up this url: http://[2600:3c01::f03c:91ff:fec8:65d9]/~bpearce it takes me to the correct page of the site. Similar for other users on the server. ---
**Author:** ![pmc2010](https://avatars.discourse-cdn.com/v4/letter/p/d2c977/32.png) [@pmc2010](https://community.letsencrypt.org/u/pmc2010)\ **Post date:** [July 30, 2017, 7:31am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/9 "2017-07-30T07:31:08Z")
Ok, it worked after waiting a while. So it does appear to be the ipv6 thing. Thank you for your help! ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [August 29, 2017, 7:31am UTC](https://community.letsencrypt.org/t/error-when-renewing-certificate-on-cwp/39154/10 "2017-08-29T07:31:17Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.