# I need help to install and config ssl certificate on my app **URL:** \ **Category:** Help\ **Created:** [January 2, 2025, 8:00am UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219 "2025-01-02T08:00:28Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![AbDevFreelance](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/abdevfreelance/32/84904_2.png) [@AbDevFreelance](https://community.letsencrypt.org/u/AbDevFreelance)\ **Post date:** [January 2, 2025, 8:00am UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219/1 "2025-01-02T08:00:28Z")
I get this error " sudo certbot --nginx -d [locationdz.com](http://locationdz.com) -d [www.locationdz.com](http://www.locationdz.com) Saving debug log to /var/log/letsencrypt/letsencrypt.log Error while running nginx -c /etc/nginx/nginx.conf -t. 2025/01/02 07:59:23 [emerg] 37509#37509: cannot load certificate "/etc/letsencrypt/live/locationdz.com/fullchain.pem": BIO\_new\_file() failed (SSL: error:80000002:system library::No such file or directory:calling fopen(/etc/letsencrypt/live/locationdz.com/fullchain.pem, r) error:10000080:BIO routines::no such file) nginx: configuration file /etc/nginx/nginx.conf test failed The nginx plugin is not working; there may be problems with your existing configuration. The error was: MisconfigurationError('Error while running nginx -c /etc/nginx/nginx.conf -t.\n\n2025/01/02 07:59:23 [emerg] 37509#37509: cannot load certificate "/etc/letsencrypt/live/locationdz.com/fullchain.pem": BIO\_new\_file() failed (SSL: error:80000002:system library::No such file or directory:calling fopen(/etc/letsencrypt/live/locationdz.com/fullchain.pem, r) error:10000080:BIO routines::no such file)\nnginx: configuration file /etc/nginx/nginx.conf test failed\n')" Can you please help me ? ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [January 2, 2025, 9:31am UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219/2 "2025-01-02T09:31:29Z")
When you opened this thread in the #Help section, you _should_ have been provided with a questionnaire. Maybe you didn't get it somehow (which is weird), _or_ you've decided to delete it. In any case, _all_ the answers to this questionnaire are required: * * * Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: I ran this command: It produced this output: My web server is (include version): The operating system my web server runs on is (include version): My hosting provider, if applicable, is: I can login to a root shell on my machine (yes or no, or I don't know): I'm using a control panel to manage my site (no, or provide the name and version of the control panel): The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): * * * That said, it looks like you removed a certificate from Certbot without following the instructions at [Certbot User Guide: safely deleting certificates](https://eff-certbot.readthedocs.io/en/stable/using.html#safely-deleting-certificates). ---
**Author:** ![AbDevFreelance](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/abdevfreelance/32/84904_2.png) [@AbDevFreelance](https://community.letsencrypt.org/u/AbDevFreelance)\ **Post date:** [January 2, 2025, 11:55am UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219/3 "2025-01-02T11:55:56Z")
My domain is: [locationdz.com](http://locationdz.com) (with a subdomain for the API: [api.locationdz.com](http://api.locationdz.com)) I ran this command: sudo ln -s /etc/nginx/sites-available/api.locationdz.com /etc/nginx/sites-enabled/ sudo nginx -t sudo systemctl restart nginx sudo certbot --nginx -d [api.locationdz.com](http://api.locationdz.com) It produced this output: Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems: Domain: [api.locationdz.com](http://api.locationdz.com) Type: unauthorized Detail: 2a02:4780:28:90b5::1: Invalid response from [http://api.locationdz.com/.well-known/acme-challenge/](http://api.locationdz.com/.well-known/acme-challenge/)... Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet. My web server is (include version): Nginx 1.22.0 The operating system my web server runs on is (include version): Ubuntu 22.04 LTS My hosting provider, if applicable, is: Domain: OVH VPS Hosting: Hostinger I can login to a root shell on my machine (yes or no, or I don't know): Yes I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No The version of my client is (e.g., output of certbot --version or certbot-auto --version if you're using Certbot): Certbot 2.9.0 I am hosting my project with the following setup: Domain & Subdomain: The main domain [locationdz.com](http://locationdz.com) is hosted on OVH for the Angular frontend. A subdomain [api.locationdz.com](http://api.locationdz.com) is set up for the Laravel API backend hosted on a VPS from Hostinger. Frontend & Backend: The Angular frontend is served on [locationdz.com](http://locationdz.com). The Laravel backend is hosted on the VPS and accessed through [api.locationdz.com](http://api.locationdz.com). SSL Certificates: I am using Certbot for SSL certificates to secure communication, though I’m facing challenges with the certificate installation for [api.locationdz.com](http://api.locationdz.com). ---
**Author:** ![AbDevFreelance](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/abdevfreelance/32/84904_2.png) [@AbDevFreelance](https://community.letsencrypt.org/u/AbDevFreelance)\ **Post date:** [January 2, 2025, 11:58am UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219/4 "2025-01-02T11:58:00Z")
hello thank you for your reply. Sorry a lot, this is my first time on the forum and I'm not really familiar with it. My domain is: [locationdz.com](http://locationdz.com) (with a subdomain for the API: [api.locationdz.com](http://api.locationdz.com)) I ran this command: sudo ln -s /etc/nginx/sites-available/api.locationdz.com /etc/nginx/sites-enabled/ sudo nginx -t sudo systemctl restart nginx sudo certbot --nginx -d [api.locationdz.com](http://api.locationdz.com) It produced this output: Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems: Domain: [api.locationdz.com](http://api.locationdz.com) Type: unauthorized Detail: 2a02:4780:28:90b5::1: Invalid response from [http://api.locationdz.com/.well-known/acme-challenge/](http://api.locationdz.com/.well-known/acme-challenge/)... Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet. My web server is (include version): Nginx 1.22.0 The operating system my web server runs on is (include version): Ubuntu 22.04 LTS My hosting provider, if applicable, is: Domain: OVH VPS Hosting: Hostinger I can login to a root shell on my machine (yes or no, or I don't know): Yes I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No The version of my client is (e.g., output of certbot --version or certbot-auto --version if you're using Certbot): Certbot 2.9.0 I am hosting my project with the following setup: Domain & Subdomain: The main domain [locationdz.com](http://locationdz.com) is hosted on OVH for the Angular frontend. A subdomain [api.locationdz.com](http://api.locationdz.com) is set up for the Laravel API backend hosted on a VPS from Hostinger. Frontend & Backend: The Angular frontend is served on [locationdz.com](http://locationdz.com). The Laravel backend is hosted on the VPS and accessed through [api.locationdz.com](http://api.locationdz.com). SSL Certificates: I am using Certbot for SSL certificates to secure communication, though I’m facing challenges with the certificate installation for [api.locationdz.com](http://api.locationdz.com). ---
**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\ **Post date:** [January 2, 2025, 5:11pm UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219/5 "2025-01-02T17:11:24Z")
Hi @AbDevFreelance, Using the online tool [Let's Debug](https://letsdebug.net/) yields this result [https://letsdebug.net/locationdz.com/2324959](https://letsdebug.net/locationdz.com/2324959) ```nohighlight MultipleIPAddressDiscrepancy Warning locationdz.com has multiple IP addresses in its DNS records. While they appear to be accessible on the network, we have detected that they produce differing results when sent an ACME HTTP validation request. This may indicate that some of the IP addresses may unintentionally point to different servers, which would cause validation to fail. [Address=2a02:4780:28:90b5::1,Address Type=IPv6,Server=nginx/1.24.0 (Ubuntu),HTTP Status=404] vs [Address=85.31.236.98,Address Type=IPv4,Server=nginx/1.24.0 (Ubuntu),HTTP Status=200] ``` ### All IP Address (both IPv4 & IPv6) must respond the same. > [@AbDevFreelance](#): > > Hostinger Also the commonly automatically assign an IPv6 Address (which doesn't point to the customers' desired server). Please see [Hostinger authentication fails with 404 - #2 by MikeMcQ](https://community.letsencrypt.org/t/hostinger-authentication-fails-with-404/222149/2) ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [January 2, 2025, 6:05pm UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219/6 "2025-01-02T18:05:21Z")
> [@AbDevFreelance](#): > > Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems: > Domain: [api.locationdz.com](http://api.locationdz.com) > Type: unauthorized > Detail: 2a02:4780:28:90b5::1: Invalid response from [http://api.locationdz.com/.well-known/acme-challenge/](http://api.locationdz.com/.well-known/acme-challenge/)... Please don't remove parts of the error message. There are many reasons for an invalid response and it is necessary to know the details. Currently, I cannot reproduce the above error because you no longer have an IPv6 AAAA address in your DNS for your `api` subdomain. If I use the IPv4 address I get a valid "Not Found" from a test. Although, your server replies with an HTTP error 500 for the api "home page". Maybe you intend this but often points to incorrect nginx config. For your apex domain name your nginx server replies differently to IPv4 and IPv6 requests. This is likely a fault in your `listen` statements. Please show the output of below command. An upper case T is essential ```nohighlight sudo nginx -T ``` See test requests to `api` subdomain ```nohighlight curl -I4 http://api.locationdz.com HTTP/1.1 500 Internal Server Error Server: nginx/1.24.0 (Ubuntu) date: Thu, 02 Jan 2025 17:57:44 GMT curl -I4 http://api.locationdz.com/.well-known/acme-challenge/test404 HTTP/1.1 404 Not Found Server: nginx/1.24.0 (Ubuntu) date: Thu, 02 Jan 2025 17:57:52 GMT ``` See different replies for apex domain using IPv4 and v6 (different Content-Length, Last-Mod, and eTag). This points to problem with server blocks and/or `listen` statements ```nohighlight curl -I4 http://locationdz.com HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Content-Length: 5222 Last-Modified: Wed, 01 Jan 2025 22:55:24 GMT ETag: "6775c7dc-1466" curl -I6 http://locationdz.com HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Content-Length: 10671 Last-Modified: Wed, 01 Jan 2025 16:52:39 GMT ETag: "677572d7-29af" ``` ---
**Author:** ![AbDevFreelance](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/abdevfreelance/32/84904_2.png) [@AbDevFreelance](https://community.letsencrypt.org/u/AbDevFreelance)\ **Post date:** [January 4, 2025, 8:57am UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219/7 "2025-01-04T08:57:04Z")
"Thank you very much, I solved the problem. My domain and subdomains are secure. My addresses were indeed pointing to two different servers. Thank you. ---
**Author:** ![AbDevFreelance](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/abdevfreelance/32/84904_2.png) [@AbDevFreelance](https://community.letsencrypt.org/u/AbDevFreelance)\ **Post date:** [January 4, 2025, 8:57am UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219/8 "2025-01-04T08:57:34Z")
Thank you very much, I solved the problem. My domain and subdomains are secure. My addresses were indeed pointing to two different servers. Thank you. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [February 3, 2025, 8:57am UTC](https://community.letsencrypt.org/t/i-need-help-to-install-and-config-ssl-certificate-on-my-app/231219/9 "2025-02-03T08:57:47Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.