Generate SSL certificate

[Dineyar]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:perdin.ca

I ran this command: I am new to Docker and Linux. After loading Traefik, it produces the following error (shown below)

It produced this output:
time="2022-12-01T17:58:38-08:00" level=info msg="Configuration loaded from file: /traefik.yml"
time="2022-12-01T17:58:44-08:00" level=error msg="Unable to obtain ACME certificate for domains "perdin.ca": unable to generate a certificate for the domains [perdin.ca]: error: one or more domains had a problem:\n[perdin.ca] acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: 174.1.34.111: Invalid response from https://perdin.ca/.well-known/acme-challenge/u20EYG4tCnO1cfs4wtRqtRj1BcFK3hX_8sq-scAz4NQ: 401\n" rule="Host(perdin.ca)" providerName=letsencrypt.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory" routerName=traefik-secure@docker

My web server is (include version):

The operating system my web server runs on is (include version):
Debian 11 (Bullseye - Raspberry PI)

My hosting provider, if applicable, is:
Self hosting on my own hardware

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

[rg305]

Hi @Dineyar, and welcome to the LE community forum

@Dineyar

acme: error: 403 :: urn:ietf:params:acme:error:unauthorized

@Dineyar

https://perdin.ca/.well-known/acme-challenge/u20EYG4tCnO1cfs4wtRqtRj1BcFK3hX_8sq-scAz4NQ: 401

I'm not a Traefik user, so take this with a grain of salt:
It looks like the HTTP request was redirected to HTTPS, but that one requires authentication
There should be a way to process the challenge request in HTTP [without redirection].

[Dineyar]

Hi Rudy,
I want to redirect http to https. How should I authenticate so that an SSL is issued?

[rg305]

I'm not a Traefik expert, nor even a user...
So, I would check on their support channels for such questions.

[linkp]

@Dineyar

I want to redirect http to https.

In general, this is a good thing. I do this in my Apache vhosts. I also carve out an exception for the /.well-known/acme-challenge/ path. I can't tell you how to configure that in traefik, but I expect it can be done.