Renew failed: Failed authorization procedure urn:acme:error:unauthorized

webroot: /var/www/sites/roundcube
test: /var/www/sites/roundcube/.well-known/acme-challenge/test.txt

I deleted the certificates but that does not help. And now I can’t sent e-mail anymore…

What is the issue here. Is the acme-challenge dir not correct, why is the comment referring to DNS settings, while initially the check is OK and retrieves a certificate.

Obtaining a new certificate
Performing the following challenges:
http-01 challenge for mail.kegge.ca
Input the webroot for mail.kegge.ca: (Enter ‘c’ to cancel): /var/www/sites/roundcube
Waiting for verification…
Cleaning up challenges
Unable to clean up challenge directory /var/www/sites/roundcube/.well-known/acme-challenge
Failed authorization procedure. mail.kegge.ca (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://mail.kegge.ca/.well-known/acme-challenge/opfkpTx-rIn4OD-zbJ2Yu21PEcSRj9ZfGizjqhqLSdc: "

<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/term"

IMPORTANT NOTES:

Clean-up fails, that may be permission, what needs to be owner and correct permission than?

Hi @tneo,

As @schoen said, your site answers with different content depending on whether you use IPv4 or IPv6.

Using IPv4 you reach your roundcube site, using IPv6 you reach a Drupal site “Kegge in Canada” so your web server is not properly configured.

As a quick fix, remove the AAAA record for mail.kegge.ca and try again.

Good luck,
sahsanu

I removed the entry in the DNS for the AAAA records. I have to wait 1 hour again for the attempt reset now. I’ll look into that config issue why it is not doing what it is supposed to do.

1 Like

By removing the AAAA entry I was able to renew the certificate. I’ll figure out why there is a difference in the curl command. This can be closed now.

1 Like

@sahsanu, thanks for bringing us back to the likely relevance of the IPv6 discrepancy here!

1 Like

Thanks for the help both of you. :smiley:

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.