[SOLVED] Unable to pass HTTP-01 verification "Error getting validation data"

[petercooperjr]

@mokeeffe

I will have to update our NGINX config to not apply IP blocking on requests to .well-known/acme-challenge/*. I don't think there's any reliable way of whitelisting Let's Encrypt's known IP addresses by the looks of things.

Yes, if you need to be blocking public Internet traffic, then having an exception for .well-known/acme-challenge is a standard way to make sure that validation attempts will still work.