Nginx Unauthorized Error well-known/acme-challenge

Hi guys my server is running on Ubuntu 18.04, Nginx, I ran all the command according to the tutorial.
My domain is: roasitas.com
Domain provider: Namecheap.com
I don’t nginx.conf has certbot or ssl configured

here are some screenshots of errors

Do i need do more configurations ? i have seen some post about IPv6 which I am not sure how to do, thank you for helping out!

1 Like

Which exact command did you run?

Was it

certbot --nginx

or a different one?

1 Like

yup
sudo certbot --nginx

also did a test

I get the same error running this renew command after upgrading from 0.40.1 to 1.1.0:

certbot-auto renew

Full output:

svend@localhost:~$ certbot-auto renew
Requesting to rerun /usr/local/bin/certbot-auto with root privileges...
Upgrading certbot-auto 0.40.1 to 1.1.0...
Replacing certbot-auto...
Creating virtual environment...
Installing Python packages...
Installation succeeded.
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/sentenceman.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for katiebenson.co.uk
http-01 challenge for sentenceman.com
http-01 challenge for shotgundentist.com
Waiting for verification...
Challenge failed for domain sentenceman.com
Challenge failed for domain shotgundentist.com
http-01 challenge for sentenceman.com
http-01 challenge for shotgundentist.com
Cleaning up challenges
Attempting to renew cert (sentenceman.com) from /etc/letsencrypt/renewal/sentenceman.com.conf produced an unexpected error: Some challenges have failed.. Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/sentenceman.com/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/sentenceman.com/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: sentenceman.com
   Type:   unauthorized
   Detail: Invalid response from
   http://sentenceman.com/.well-known/acme-challenge/I8Zmz33a9_4TKpXBf6wO2Rdfsi8G4VUlJqSNG53lfIo
   [109.74.202.203]: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML
   2.0//EN\">\n<html><head>\n<title>404 Not
   Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p"

   Domain: shotgundentist.com
   Type:   unauthorized
   Detail: Invalid response from
   http://shotgundentist.com/.well-known/acme-challenge/rBuzjSHAJf0AruJ37u4sD8iwyoEvbBJ18vANi2R3WC4
   [2a01:7e00::f03c:91ff:fe8c:a08b]: "<!DOCTYPE HTML PUBLIC
   \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>404 Not
   Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p"

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

you are running on nginx as well?

i wonder did you any nginx.conf ?

1 Like

problem solved
found this
sudo certbot --authenticator standalone --installer nginx --pre-hook "service nginx stop" --post-hook "service nginx start"

1 Like

I guess not. I don’t have a certbot command, only certbot-auto. And if I run your command with certbot-auto it says it can’t find nginx…

svend@localhost:~$ sudo certbot-auto --authenticator standalone --installer nginx --pre-hook "service nginx stop" --post-hook "service nginx start"
Saving debug log to /var/log/letsencrypt/letsencrypt.log
The nginx plugin is not working; there may be problems with your existing configuration.
The error was: NoInstallationError("Could not find a usable 'nginx' binary. Ensure nginx exists, the binary is executable, and your PATH is set correctly.",)
1 Like

I just tried again, and now it worked.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.