Failure with AuthorizationFailedException in

Help
#1

I am quite new to lets encrypt. For yours we create certificates for our Exchange Server (IIS)
Work perfect until start of Januray this year.

My domain is: exchange.grutzeck.loc

I ran this command:
[INFO] Let's Encrypt Windows Simple (LEWS)
[INFO] Software version 198.2.6594.21512 (RELEASE)
[INFO] IIS version 8.5

C:\letsencrypt-win-simple\letsencrypt.exe --renew --baseuri "https://acme-v01.api.letsencrypt.org/"

It produced this output:
An exception was thrown while invoking the constructor 'Void .ctor(LetsEncrypt.ACME.Simple.Services.IInputService, LetsEncrypt.ACME.Simple.Services.IOptionsService, LetsEncrypt.ACME.Simple.Services.ILogService, LetsEncrypt.ACME.Simple.ISettingsService, LetsEncrypt.ACME.Simple.Services.ProxyService)' on type 'LetsEncryptClient'.---> Die Verbindung mit dem Remoteserver kann nicht hergestellt werden. (See inner exception for details.) (See inner exception for details.)

Tried to use the new WACS but it doesn't show the old certificate.
Creating a new one doesn't work.
What to do?

1 Like
#2

Welcome to the Let's Encrypt Community :slightly_smiling_face:

1 Like
#3

This (.loc) is not under a public TLD and thus cannot be certified by Let's Encrypt:

exchange.grutzeck.loc

1 Like
#4

ACMEv1 is deprecated and will soon stop functioning entirely:

You can find the brownout schedule for ACMEv1 here:

letsencrypt.status.io

1 Like
#5

This was a typo. My domain is exchange.grutzeck.de
Now I get Create certificate failed: Unable to create order

 A simple Windows ACMEv2 client (WACS)
 Software version 2.1.14.996 (RELEASE, PLUGGABLE, 64-bit)
 Connecting to https://acme-v02.api.letsencrypt.org/...
 Initial connection failed, retrying with TLS 1.2 forced
 Unable to connect to ACME server
 IIS version 8.5
 Running with administrator credentials
 Scheduled task not configured yet
 Please report issues at https://github.com/win-acme/win-acme

 N: Create certificate (default settings)
 M: Create certificate (full options)
 R: Run renewals (0 currently due)
 A: Manage renewals (0 total)
 O: More options...
 Q: Quit

 Please choose from the menu: N

 Running in mode: Interactive, Simple

  Please select which website(s) should be scanned for host names. You may
  input one or more site identifiers (comma-separated) to filter by those
  sites, or alternatively leave the input empty to scan *all* websites.

 1: Default Web Site (1 binding)

 Site identifier(s) or <Enter> to choose all: 1

 1: exchange.grutzeck.de (Site 1)

  Listed above are the bindings found on the selected site(s). By default all
  of them will be included, but you may either pick specific ones by typing the
  host names or identifiers (comma-separated) or filter them using one of the
  options from the menu.

 P: Pick bindings based on a search pattern
 A: Pick *all* bindings

 Binding identifiers(s) or menu option: A

 1: exchange.grutzeck.de (Site 1)

 Continue with this selection? (y*/n) - yes

 Target generated using plugin IIS: exchange.grutzeck.de

 Failed to create order

 Create certificate failed, retry? (y/n*) - <Enter>

 Create certificate failed: Unable to create order
#6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.