# Invalid response from /.well-known/acme-challenge
**URL:** https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956
**Category:** Help
**Created:** [October 27, 2018, 4:20pm UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956 "2018-10-27T16:20:08Z")
**Posts on this page:** 10
**Page:** 1
### Author:  [@LtZerouk](https://community.letsencrypt.org/u/LtZerouk)
#### Post date: [October 27, 2018, 4:20pm UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/1 "2018-10-27T16:20:08Z")
Hi,
My domain is: [zerouk.me](http://zerouk.me)
I ran this command: /opt/letsencrypt/letsencrypt-auto
It produced this output:
Failed authorization procedure. [www.zerouk.com](http://www.zerouk.com) (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from [http://www.zerouk.com/.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE:](http://www.zerouk.com/.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE:) “\\n\n\ \\n\n\n \n \\n \
### Author:  [@mnordhoff](https://community.letsencrypt.org/u/mnordhoff)
#### Post date: [October 27, 2018, 4:36pm UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/2 "2018-10-27T16:36:52Z")
Both of those domains have different IP addresses, and they’re both GoDaddy IP addresses, not from So you Start.
```
zerouk.com. (insecure) 14172 A 97.74.234.72
www.zerouk.com. (insecure) 14173 CNAME zerouk.com.
zerouk.com. (insecure) 14172 A 97.74.234.72
zerouk.me. (insecure) 372 A 184.168.131.241
www.zerouk.me. (insecure) 3373 CNAME zerouk.me.
zerouk.me. (insecure) 372 A 184.168.131.241
```
Is that correct?
---
### Author:  [@Osiris](https://community.letsencrypt.org/u/Osiris)
#### Post date: [October 27, 2018, 4:37pm UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/3 "2018-10-27T16:37:34Z")
> [@LtZerouk](#):
>
> My domain is: [zerouk.me](http://zerouk.me)
> [@LtZerouk](#):
>
> Failed authorization procedure. [www.zerouk.com](http://www.zerouk.com) (http-01):
Which domain are you trying to get a certificate for? Both?
> [@LtZerouk](#):
>
> I ran this command: /opt/letsencrypt/letsencrypt-auto
If you run _just_ that command, `certbot` (which is the current name of the Let's Encrypt official EFF client) would have asked you a lot of questions. What were the answers to those questions?
Alas, the software you're running on your site seems to be the culprit. For example, for your `.me` domain:
```
osiris@desktop ~ $ curl -Lv http://www.zerouk.me/.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE
* Trying 184.168.131.241...
* Connected to www.zerouk.me (184.168.131.241) port 80 (#0)
> GET /.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE HTTP/1.1
> Host: www.zerouk.me
> User-Agent: curl/7.49.0
> Accept: */*
>
< HTTP/1.1 302 Found
< Connection: close
< Pragma: no-cache
< cache-control: no-cache
< Location: /OTcnZ/.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE
<
* Closing connection 0
* Issue another request to this URL: 'http://www.zerouk.me/OTcnZ/.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE'
* Hostname www.zerouk.me was found in DNS cache
* Trying 184.168.131.241...
* Connected to www.zerouk.me (184.168.131.241) port 80 (#1)
> GET /OTcnZ/.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE HTTP/1.1
> Host: www.zerouk.me
> User-Agent: curl/7.49.0
> Accept: */*
>
< HTTP/1.1 302 Found
< Connection: close
< Pragma: no-cache
< cache-control: no-cache
< Location: /.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE
<
* Closing connection 1
* Issue another request to this URL: 'http://www.zerouk.me/.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE'
* Hostname www.zerouk.me was found in DNS cache
* Trying 184.168.131.241...
* Connected to www.zerouk.me (184.168.131.241) port 80 (#2)
> GET /.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE HTTP/1.1
> Host: www.zerouk.me
> User-Agent: curl/7.49.0
> Accept: */*
>
< HTTP/1.1 404 Not Found
(...)
osiris@desktop ~ $
```
It redirects to a whole other directory: `Location: /OTcnZ/.well-known/acme-challenge/...`
And for your `.com` domain, the redirect is to HTTPS, no matter what the request was:
```
osiris@desktop ~ $ curl -Lv http://www.zerouk.com/.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE
* Trying 97.74.234.72...
* Connected to www.zerouk.com (97.74.234.72) port 80 (#0)
> GET /.well-known/acme-challenge/pO5-WLZBGEfJ2GhaqyWokrkfluLgvn3yy8tnirvCmjE HTTP/1.1
> Host: www.zerouk.com
> User-Agent: curl/7.49.0
> Accept: */*
>
< HTTP/1.1 302 Moved Temporarily
< Date: Sat, 27 Oct 2018 16:38:48 GMT
< Server: Apache/2.4.18 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
< X-Powered-By: PHP/5.5.32
< Location: https://zerouk.com/
< Cache-Control: max-age=31536000
< Expires: Sun, 27 Oct 2019 16:38:48 GMT
< Vary: User-Agent
< Connection: keep-alive
< Content-Length: 0
< Content-Type: text/html; charset=UTF-8
<
* Connection #0 to host www.zerouk.com left intact
osiris@desktop ~ $
```
See that `Location` header? Without the `/.well-known/acme-challenge/` part? Looks like a broken redirect. Your redirect location should also include the request path. Unless this is on purpose. If so, you should exclude the `/.well-known/acme-challenge/` path from that redirect.
---
### Author:  [@LtZerouk](https://community.letsencrypt.org/u/LtZerouk)
#### Post date: [October 27, 2018, 5:43pm UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/4 "2018-10-27T17:43:39Z")
Oups! My bad. I maide a mistake in the virtualhost It's not [www.zerouk.com](http://www.zerouk.com) but [www.zerouk.me](http://www.zerouk.me). Corrected it.
@mnordhoff sorry just mixed up. I'm renting a server at soyoustart and I bought the domaine name at godaddy.
> [@Osiris](#):
>
> Alas, the software you’re running on your site seems to be the culprit. For example, for your `.me` domain:
I don't know what you mean there. What should I do?
> [@Osiris](#):
>
> If you run _just_ that command, `certbot` (which is the current name of the Let’s Encrypt official EFF client) would have asked you a lot of questions. What were the answers to those questions?
It just asked one question. This is what came out after the command, just before what I posted in the first message:
```
root@Zerouk:~# /opt/letsencrypt/letsencrypt-auto
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: zerouk.me
2: www.zerouk.me
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel):
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for www.zerouk.me
http-01 challenge for zerouk.me
Enabled Apache rewrite module
Waiting for verification...
Cleaning up challenges
```
Should I have gone for [zerouk.me](http://zerouk.me) only? [www.zerouk.me](http://www.zerouk.me) is only a serveralias in the virtualhost.
---
### Author:  [@mnordhoff](https://community.letsencrypt.org/u/mnordhoff)
#### Post date: [October 27, 2018, 5:49pm UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/5 "2018-10-27T17:49:58Z")
Still, `zerouk.me` and `www.zerouk.me` also point at a GoDaddy IP address. Not a So you Start server.
(Some?) GoDaddy sites use a web server that sends weird HTTP redirects, and blocks some requests. Yours is one of them. It interferes with Let’s Encrypt HTTP validation.
---
### Author:  [@LtZerouk](https://community.letsencrypt.org/u/LtZerouk)
#### Post date: [October 27, 2018, 5:52pm UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/6 "2018-10-27T17:52:25Z")
so how what should I do?
---
### Author:  [@LtZerouk](https://community.letsencrypt.org/u/LtZerouk)
#### Post date: [October 27, 2018, 6:02pm UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/7 "2018-10-27T18:02:57Z")
Just thougt about one thing. If I remove the forwarding of my domain in the godaddy manager and ad the domain in the secondary DNS manager by soyoustart would that resolve the problem?
---
### Author:  [@schoen](https://community.letsencrypt.org/u/schoen)
#### Post date: [October 27, 2018, 10:06pm UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/8 "2018-10-27T22:06:45Z")
> [@LtZerouk](#):
>
> Just thougt about one thing. If I remove the forwarding of my domain in the godaddy manager and ad the domain in the secondary DNS manager by soyoustart would that resolve the problem?
The tools you're using expect the DNS records to be pointed directly at the web server, not at a GoDaddy forwarding service, so making this happen would be a useful first step.
---
### Author:  [@LtZerouk](https://community.letsencrypt.org/u/LtZerouk)
#### Post date: [October 28, 2018, 10:39am UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/9 "2018-10-28T10:39:20Z")
Thank’s for your help. Since the problem seems to be godaddy I bought another domaine by ovh. I made it with this one and it works perfectly. Will keep this one.
Again thank’s a lot for your time and help.
---
### Author:  [@system](https://community.letsencrypt.org/u/system)
#### Post date: [November 27, 2018, 10:39am UTC](https://community.letsencrypt.org/t/invalid-response-from-well-known-acme-challenge/75956/10 "2018-11-27T10:39:25Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.