Let's encrypt renew certificate issue

Help
7

Hi @julos08,

Your domains has both DNS records A and AAAA but you have not configured it to answer correctly to IPv6 connections.

IPv4 is OK:

curl -IkL4 http://www.renard-asso.org/.well-known/acme-challenge/test.txt
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2017 07:57:26 GMT
Server: Apache/2
Last-Modified: Wed, 15 Mar 2017 12:50:32 GMT
ETag: "5-54ac463dafbeb"
Accept-Ranges: bytes
Content-Length: 5
Vary: User-Agent
Content-Type: text/plain

IPv6 is NOT OK:

curl -IkL6 http://www.renard-asso.org/.well-known/acme-challenge/test.txt
HTTP/1.1 404 Not Found
Set-Cookie: 60gpBAK=R1224195776; path=/; expires=Tue, 06-Jun-2017 08:34:02 GMT
Date: Tue, 06 Jun 2017 07:25:28 GMT
Content-Type: text/html
Set-Cookie: 60gp=R4109771239; path=/; expires=Tue, 06-Jun-2017 08:43:42 GMT
Server: Apache
Accept-Ranges: bytes
Vary: Accept-Encoding
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Wed, 31 Mar 1979 01:23:45 GMT
X-IPLB-Instance: 183

Let’s Encrypt prefers IPv6 so it will use it to validate your domain so you have 2 options, configure correctly to use IPv6 or remove the AAAA record for your domain.

Cheers,
sahsanu

1 Like