Invalid response from

[Manoel]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: nextcloud.yamaha-motor.com.br

I ran this command: certbot-auto -d nextcloud.yamaha-motor.com.br

It produced this output:

Which names would you like to activate HTTPS for?

---

1: nextcloud.yamaha-motor.com.br

---

Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter ‘c’ to cancel): 1
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for nextcloud.yamaha-motor.com.br
Waiting for verification…
Challenge failed for domain nextcloud.yamaha-motor.com.br
http-01 challenge for nextcloud.yamaha-motor.com.br
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:

• The following errors were reported by the server:

  Domain: nextcloud.yamaha-motor.com.br
  Type: unauthorized
  Detail: Invalid response from
  http://nextcloud.yamaha-motor.com.br/.well-known/acme-challenge/dMni7XNIGmHIcllCiq3a_7hLvvWNc8feMG2LBjOOOrQ
  [201.48.119.15]: “\n\n403
  Forbidden\n\n

  Forbidden

  \n<p”

  To fix these errors, please make sure that your domain name was
  entered correctly and the DNS A/AAAA record(s) for that domain
  contain(s) the right IP address.

My web server is (include version): HTTPD

The operating system my web server runs on is (include version):

RHEL 7

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

[JuergenAuer]

Hi @Manoel

@Manoel

I ran this command: certbot-auto -d nextcloud.yamaha-motor.com.br

checking your domain the main things are ok ( https://check-your-website.server-daten.de/?q=nextcloud.yamaha-motor.com.br ):

Domainname	Http-Status	redirect	Sec.	G
• http://nextcloud.yamaha-motor.com.br/
201.48.119.15	200		0.480	H
small content:
• https://nextcloud.yamaha-motor.com.br/
201.48.119.15	-2		1.720	V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 201.48.119.15:443
• NextCloud
201.48.119.15	404		0.490	A
Not Found
Visible Content: Not Found The requested URL /.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de was not found on this server.

http / port 80 is open, checking a random file in /.well-known/acme-challenge there is the expected result http status 404 - Not Found.

If you use the --apache authenticator, Certbot adds a temporary location definition -> missing permission.

So try to use --webroot.

What says

apachectl -S (or)
httpd -S

Find your DocumentRoot, then use it.

certbot run -a webroot -i apache -w yourDocumentRoot -d nextcloud.yamaha-motor.com.br

[Manoel]

Thank you Juergen.

Perfect!