Failed authorization procedure. Invalid response

Hello. I try to renew certificate and get a error message.

My domain is:
admin.f1parser.ru

I ran this command:
certbot-auto certonly --expand --manual --manual-public-ip-logging-ok -d admin.f1parser.ru

It produced this output:
admin.f1parser.ru (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://admin.f1parser.ru/.well-known/acme-challenge/Nk5Ee4smNmY8n_atl2L0xKrxPw19VVVdWA6ntlsP-Rg: "

<meta name="viewport" content="width=device-width, initial"

Domain: admin.f1parser.ru
Type: unauthorized
Detail: Invalid response from
http://admin.f1parser.ru/.well-known/acme-challenge/Nk5Ee4smNmY8n_atl2L0xKrxPw19VVVdWA6ntlsP-Rg:
"

<meta name="viewport" content="width=device-width, initial"

I also try to do it with --webroot flag and get the same error. However, file is available now through the link in the browser.

My web server is: ubuntu16.04, nginx1.10

Hi @SergeyMyasnikov,

I think you are seeing an IPv6 issue. In IPv4, that challenge URL returns a challenge token, while in IPv6, it returns a 404 not found error. The Let’s Encrypt CA prefers to validate over IPv6 when both IPv6 and IPv4 are available.

1 Like

Thanks for your answer! Setting up IPv6 helped me to solve the problem.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.