Let’s Encypt error on Univention UCS Server

Help
1

Hi,
I’ve tried using the Let’s Encrypt app on my Univention Server (Apache).
When I have Added the domain of our Univention this error occurs:

ValueError: Challenge did not pass for cloud.amut.it: {u’status’: u’invalid’, u’challenges’: [{u’status’: u’invalid’, u’validationRecord’: [{u’url’: u’http://cloud.amut.it/.well-known/acme-challenge/v5HhuzN5a3w3hQAsiVCW_BfcP8PzO-xbuEJ7E8HEIqA’, u’hostname’: u’cloud.amut.it’, u’addressUsed’: u’95.142.187.173’, u’port’: u’80’, u’addressesResolved’: [u’95.142.187.173’]}, {u’url’: u’https://cloud.amut.it/[https:/cloud.amut.it/.well-known/acme-challenge/v5HhuzN5a3w3hQAsiVCW_BfcP8PzO-xbuEJ7E8HEIqA’, u’hostname’: u’cloud.amut.it’, u’addressUsed’: u’95.142.187.173’, u’port’: u’443’, u’addressesResolved’: [u’95.142.187.173’]}], u’url’: u’https://acme-v02.api.letsencrypt.org/acme/chall-v3/788083832/OwZIhg’, u’token’: u’v5HhuzN5a3w3hQAsiVCW_BfcP8PzO-xbuEJ7E8HEIqA’, u’error’: {u’status’: 403, u’type’: u’urn:ietf:params:acme:error:unauthorized’, u’detail’: u’Invalid response from https://cloud.amut.it/%!b(MISSING)https:/cloud.amut.it/.well-known/acme-challenge/v5HhuzN5a3w3hQAsiVCW_BfcP8PzO-xbuEJ7E8HEIqA [95.142.187.173]: "\n\n\n\n

The domain is reachable, http redirection on https is active.
Do you have any suggestions to make it work?
Thanks in advance.

2

Hi @Bongiovanni

see your output. Checking your domain via https://check-your-website.server-daten.de/?q=cloud.amut.it there is a wrong redirect.

http://cloud.amut.it/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

is redirected to

https://cloud.amut.it/%5bhttps:/cloud.amut.it/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

not to

https://cloud.amut.it/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Looks like a duplicated redirect rule.

3

Hi, thank you for the prompt reply.
Do you know what can I check on UCS/Apache to fix the wrong/duplicated redirect rule?

To redirect http to https on my UCS/Apache webserver I’ve just typed:
ucr set apache2/force_https=yes
Then created a ‘/var/www/.htaccess’ with those entries:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.) [https://%{HTTP_HOST}%{REQUEST_URI}*

4

There is a wrong open bracket [.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.