Failed authorization procedure. bitrixai.com (http-01): urn:acme:error:unauthorized

Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter ‘c’ to cancel): 1,2
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for bitrixai.com
http-01 challenge for www.bitrixai.com
Enabled Apache rewrite module
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. bitrixai.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://bitrixai.com/.well-known/acme-challenge/n7wVoogczqU6PlJnq9qmk8ZVBIuUb8VlsWhYgfiVCw4 [50.63.202.39]: "<body style=“padding:0; margin:0;”><meta name=“viewport” content=“widt”, www.bitrixai.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://www.bitrixai.com/.well-known/acme-challenge/iT_Yno3IMAxJdyu9EXVFHklBinxQOferAqYWRLm9v60 [50.63.202.39]: 404

IMPORTANT NOTES:

My domain is:
bitrixai.com
I ran this command:
certbot --apache
It produced this output:
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter ‘c’ to cancel): 1,2
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for bitrixai.com
http-01 challenge for www.bitrixai.com
Enabled Apache rewrite module
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. bitrixai.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://bitrixai.com/.well-known/acme-challenge/n7wVoogczqU6PlJnq9qmk8ZVBIuUb8VlsWhYgfiVCw4 [50.63.202.39]: "<body style=“padding:0; margin:0;”><meta name=“viewport” content=“widt”, www.bitrixai.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://www.bitrixai.com/.well-known/acme-challenge/iT_Yno3IMAxJdyu9EXVFHklBinxQOferAqYWRLm9v60 [50.63.202.39]: 404

IMPORTANT NOTES:

My web server is (include version):

The operating system my web server runs on is (include version):
apache2 2.4.49
My hosting provider, if applicable, is:

pls help me!!

Hi @sahan

checking your domain that can't work - https://check-your-website.server-daten.de/?q=bitrixai.com

Your ip addresses:

Host T IP-Address is auth. ∑ Queries ∑ Timeout
bitrixai.com A 50.63.202.33 Scottsdale/Arizona/United States (US) - GoDaddy.com, LLC Hostname: ip-50-63-202-33.ip.secureserver.net yes 2 0
A 123.231.44.97 Maradana/Western Province/Sri Lanka (LK) - MTT Network (Pvt) Ltd No Hostname found yes 2 0
A 184.168.221.60 Scottsdale/Arizona/United States (US) - GoDaddy.com, LLC Hostname: ip-184-168-221-60.ip.secureserver.net yes 2 0
AAAA yes
www.bitrixai.com C bitrixai.com yes 1 0
A 50.63.202.33 Scottsdale/Arizona/United States (US) - GoDaddy.com, LLC Hostname: ip-50-63-202-33.ip.secureserver.net yes
A 123.231.44.97 Maradana/Western Province/Sri Lanka (LK) - MTT Network (Pvt) Ltd No Hostname found yes
A 184.168.221.60 Scottsdale/Arizona/United States (US) - GoDaddy.com, LLC Hostname: ip-184-168-221-60.ip.secureserver.net yes
www.bitrixai.com A 184.168.221.54 Scottsdale/Arizona/United States (US) - GoDaddy.com, LLC No Hostname found no

That's a GoDaddy ip.secureserver.net, so you don't have really the required access.

The result: Checking /.well-known/acme-challenge/random-filename there are different results (check the output of the url check, too long to copy).

Sample:

http://bitrixai.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 123.231.44.97, Status 404
	
	http://bitrixai.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 184.168.221.60, Status 302
	configuration problem - different ip addresses with different status

Sometimes http status 404, sometimes redirects, sometimes http status 200.

So Letsencrypt doesn't see the required content of the validation file.

thank you for response
i’ll check it

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.