We just went through a challenge renewing our certs. Cloudflare was intercepting the challenge/response request with a "verify you are human" response. This causes the renewal attempt to fail. To make a long story short, the challenge/request was intercepted by Cloudflare because the request came f…

See here: [image] Multi-Perspective Validation & Geoblocking FAQ Issuance Tech (… and recently here: Firewall Geoblocking and LetsEncrypt

Hi @Zootal , [image] Zootal: I'm curious how others deal with this type of issue? One solution is to switch to the DNS-01 challenge of the Challenge Types - Let's Encrypt as it is the only one that does not need to access a server on the FQDN. However it does need access to the Authoritative…

[image] Zootal: I'm curious how others deal with this type of issue? I use my own custom Cloudflare rules that exempt the /.well-known/acme-challenge path from any security challenges or redirection. As long as your newly implemented rules cover the relevant criteria and settings, you should …

That was actually our final solution, to exempt that specific path. So far it seems to work.

Renewal blocked by Cloudflare because challenge was coming from outside the US

Issuance Tech

9peppe February 28, 2025, 5:59pm 2

See here:

and recently here: Firewall Geoblocking and LetsEncrypt

Topic		Replies	Views
Some challenges have failed due to geographic blocking Help	6	771	May 9, 2024
Specify source country for http-01 challenge Feature Requests	14	3413	May 16, 2024
Connection Timeout when renewing Help	11	1289	April 15, 2022
Challenge failed for domain. Is cloudflare the issue? Help	5	4301	December 24, 2020
Question on renewal and what Countries are connecting Help	6	2055	July 6, 2024

Renewal blocked by Cloudflare because challenge was coming from outside the US

Related topics