New cert for 2 servers behind loadbalancer (OVH)

[tvequaud]

Hi there,

I tried this shell command :

root@serveur-1:/home/debian# certbot certonly --webroot --webroot-path /var/www/dynaback/web -d dynadmin3.dynabuy.fr -d dynadmin4.dynabuy.fr --staging

dynadmin3.dynabuy.fr is behind a loadbalancer.
dynadmin4.dynabuy.fr point directly on the web server.

No problem with dynadmin4, but with dynadmin3 I get this output :

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for dynadmin3.dynabuy.fr
http-01 challenge for dynadmin4.dynabuy.fr
Using the webroot path /var/www/dynaback/web for all unmatched domains.
Waiting for verification...
Cleaning up challenges
Failed authorization procedure. dynadmin3.dynabuy.fr (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: The key authorization file from the server did not match this challenge [RsI9Eujxp1kJDc7msUwX8327QKCC2Fobvw3mOLrHRuY.W83gYgcQnqI7jHUTiXM9r-FpJjXF3PV_9sgvRDyQRLM] != [RsI9Eujxp1kJDc7msUwX8327QKCC2Fobvw3mOLrHRuY.4E3VCTFsySjUrqnCg0ooULx-3kbdPBygi0aWkvg5Gd8]

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: dynadmin3.dynabuy.fr
   Type:   unauthorized
   Detail: The key authorization file from the server did not match
   this challenge
   [RsI9Eujxp1kJDc7msUwX8327QKCC2Fobvw3mOLrHRuY.W83gYgcQnqI7jHUTiXM9r-FpJjXF3PV_9sgvRDyQRLM]
   !=
   [RsI9Eujxp1kJDc7msUwX8327QKCC2Fobvw3mOLrHRuY.4E3VCTFsySjUrqnCg0ooULx-3kbdPBygi0aWkvg5Gd8]

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A record(s) for that domain
   contain(s) the right IP address.

Any idea ?

[_az]

Hello,

I noticed that perhaps you have managed to solve your issue - can you confirm?

[tvequaud]

Not yet, I bypassed the loadbalancer for dynadmin3 to create the cert without the loadbalancer on both domains. So now I’m waiting DNS propagation for dynadmin3 to point on loadbalancer again.