Failed authorization procedure for my domain

In the past I configured Apache as a reverse proxy and then deployed the Letsencrypt certificate and it worked fine for 2 years.
It's only in the last 2 weeks that the problem started.

What has changed since the last certificate was renewed?

2 Likes

Yes, something is putting extra data around the ACME Challenge response from your Apache server.

This extra data is preventing the challenge from succeeding. The tags for <code><span> are the problem. We cannot figure out why this is being added to your server's response.

3 Likes

Only the PHP version that i updated

hmm...
PHP should be avoiding/ignoring files that don't end with .php

3 Likes

Yes, exactly

Can you review the PHP configuration?
Can you test downgrade PHP [to previous version]?

2 Likes

my PHP version was actually 7.2, it was when I wanted to downgrade the PHP version to 5.5 that I ran into a few problems. I deleted the PHP 5.5 directory because I had installed it manually (make install), but when I type the PHP -v command, I still see the 5.5 version.

Show:
which php
which PHP

[whichever case you used]

2 Likes

which php
/usr/local/bin/php

That explains why deleting the PHP 5.5 directory did not change the version number.
The PHP executable file is located:

3 Likes

How to solve this issue, pls.

Hello, can you help me pls

I am out of ideas.
But I'm pretty sure it has something to do with your PHP configuration.
Do you know where the wrapping occurs?:

<code><span style="color: #000000">
test4<br /></span>
3 Likes

I don't have good ideas either but could you show output of this

sudo grep -r prepend /etc/apache2

Something is adding those extra html tags around the actual data. This has to stop at least for the responses for /.well-known/acme-challenge requests

3 Likes

Since your certificate is expired, I would run certbot in manual mode and use a DNS challenge to obtain a new cert.

It is not a permanent solution; But it will give you 90 days to figure out the coding problem.

3 Likes

Ok, i see.

sudo grep -r prepend /etc/apache2
/etc/apache2/mods-available/autoindex.conf: # HeaderName is the name of a file which should be prepended to

what about?:
sudo grep -r 000000 /etc/apache2

2 Likes

sudo grep -r 000000 /etc/apache2
/etc/apache2/magic:0 belong 0x00000001