Failed authorization procedure

shehantissera · July 26, 2018, 7:17am

I have created the Service Account with DNS > DNS Administrator priviledge
according to this doc
https://cloud.google.com/dns/access-control#permissions_and_roles

I also added a A record to the following
_acme-challenge.dev.smoothflow.io. A 300 35.184.92.152

Still it says Failed authorization procedure? Have I missed any documentation?
Where am I doing wrong?

My domain is: dev.smoothflow.io

I ran this command:

sudo docker run -it --rm --name certbot
-v “/etc/letsencrypt:/etc/letsencrypt”
-v “/var/lib/letsencrypt:/var/lib/letsencrypt”
-v “/home/shehan/google.json:/home/shehan/google.json”
certbot/dns-google certonly --server https://acme-v02.api.letsencrypt.org/directory
–dns-google
–dns-google-credentials “/home/shehan/google.json”
–dns-google-propagation-seconds 60
-d *.dev.smoothflow.io

It produced this output:

The following errors were reported by the server:
Domain: dev.smoothflow.io
Type: unauthorized
Detail: No TXT record found at _acme-challenge.dev.smoothflow.io
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.

My web server is (include version): Apache2

The operating system my web server runs on is (include version): Ubuntu 15.10

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No

mnordhoff · July 26, 2018, 7:57am

smoothflow.io is using Amazon Route 53:

smoothflow.io.          86400   IN      NS      ns-7.awsdns-00.com.
smoothflow.io.          86400   IN      NS      ns-623.awsdns-13.net.
smoothflow.io.          86400   IN      NS      ns-1360.awsdns-42.org.
smoothflow.io.          86400   IN      NS      ns-1945.awsdns-51.co.uk.

You need to switch to Certbot’s Route 53 plugin (with Route 53 credentials), or go to your domain registrar and change the NS records from Amazon to Google.

(For what it’s worth, the _acme-challenge subdomain doesn’t need an A record. It just uses a TXT record.)

shehantissera · July 26, 2018, 8:39am

smoothflow.io is another server. but in this question I am having trouble with dev.smoothflow.io which is another server.

mnordhoff · July 26, 2018, 8:48am

But the whole domain’s DNS is hosted by Amazon Route 53, so you have to update the DNS records for the zone at Amazon Route 53.

system · August 25, 2018, 8:48am

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Failed authorization procedure Help	4	500	June 2, 2020
How to fix "Failed authorization procedure"? Server	9	78267	September 2, 2016
Failed authorization procedure Help	4	704	January 28, 2019
Wildcard Certificate with Google Cloud DNS urn:ietf:params:acme:error:unauthorized Help	22	3056	January 9, 2019
Failed authorization procedure via DNS Help	8	3136	February 9, 2018

Failed authorization procedure

Related topics