Some challenges have failed when i run sudo certbot --nginx -d www.example.com

I ran this command: sudo certbot --nginx -d www.example.com

It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for www.example.com

Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain: www.example.com
Type: unauthorized
Detail: 2a02:4780:6:1464:0:3175:8fc9:2: Invalid response from http://www.example.com/.well-known/acme-challenge/UBRz9eJy1VaoZ_tuaRNSTBifjPWp-QCqlUaZ00TsxsA: 404

Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.

Some challenges have failed.

I can login to a root shell on my machine (yes or no, or I don't know):
yes

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):2.1.0

note: that error show After deleting old certs, cannot create new ones
because it show same error when i try to run the renews command

also i have a subdomain his ssl work fine and i can renew it simply

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):


Please don't remove any of the questions of the questionnaire, even if you think it's not important. That might be the case, but even then, just answer the question please. If you don't know the answer, then that's a valid answer too.

i'm sorry i don't know that here the rest of the answer:
My domain is: www.itcanac.com

My web server is (include version):nginx 1.22.0

The operating system my web server runs on is (include version):Ubuntu 23.04

My hosting provider, if applicable, is:hostinger

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):No

There's a Hostinger "LiteSpeed" server answering on this hostname on IPv6, presenting some Hostinger "Default page". And on IPv4 there's an Ubuntu nginx webserver reporting. So I guess your IPv6 address might be incorrect.

Let's Encrypt prefers IPv6, so requests for the challenge would go to Hostingers LiteSpeed server instead of your nginx. Hostinger also has a certificate issued for your hostname and is using it on their IPv6 address.

2 Likes

Thank you so much that's was the solution

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.