Hello all, I try to install Letsencrypt on my server but i got this error message. I would like to ask what is the mistake? How to fix this bug?

Failed authorization procedure. xxxxx.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://xxxxx.com/.well-known/acme-challenge/5G3EDVxGJr1ky8tyQ0KkwzRqHQv-loHWwX4jt0wGHwk: "

404 Not Found

Not Found

IMPORTANT NOTES:

Without your domain name, the command you ran etc. it becomes more difficult to help.

The error is basically saying that if you add a file into webroot/.well-known/acme-challenge on your server, it couldn’t be reached in a browser for some reason.

Please complete the initial questions


My domain is:

I ran this command:
It produced this output:

My operating system is (include version):

My web server is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):


I currently use centos6.5 with apache2.
I ran the below comand
./letsencrypt-auto certonly --webroot -w /usr/local/mysource/test/.well-known/acme-challenge -d xxxxx.com

I got the below error:

Failed authorization procedure. xxxxx.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://xxxxx.com/.well-known/acme-challenge/5G3EDVxGJr1ky8tyQ0KkwzRqHQv-loHWwX4jt0wGHwk:

404 Not Found
Not Found

IMPORTANT NOTES:

404 Not Found
Not Found

To fix these errors, please make sure that your domain name was
entered correctly and the DNS A record(s) for that domain
contain(s) the right IP address.

Could you show me what is my mistake?
Thanks you

Your Apache Server configuration is blocking access to the /.well-known location which is needed for the webroot ACME challenge. Have a look here and here for how to do that.

1 Like

Is /usr/local/mysource/test/ a valid and/or logical place for the webroot? Sounds strange to me, to be honest.

Aside from what @Osiris said, that looks incorrect. It will make Certbot put files in /usr/local/mysource/test/.well-known/acme-challenge/.well-known/acme-challenge! Your web server probably isn't configured to actually handle it that way. Try

./letsencrypt-auto certonly --webroot -w /usr/local/mysource/test -d xxxxx.com

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.