# SSL Certbot errors

**URL:** <https://community.letsencrypt.org/t/ssl-certbot-errors/131920>\
**Category:** Help\
**Created:** [August 25, 2020, 1:59am UTC](https://community.letsencrypt.org/t/ssl-certbot-errors/131920 "2020-08-25T01:59:24Z")\
**Posts on this page:** 4\
**Page:** 2

<div class="post-metadata">

**Author:** ![Jeffy892](https://avatars.discourse-cdn.com/v4/letter/j/ba9def/32.png) [@Jeffy892](https://community.letsencrypt.org/u/Jeffy892)\
**Post date:** [August 25, 2020, 8:57am UTC](https://community.letsencrypt.org/t/ssl-certbot-errors/131920/21 "2020-08-25T08:57:10Z")

</div>

Oh yeah it worked.

And this is the vhconf.conf  
docRoot $VH\_ROOT/html/  
enableGzip 1

errorlog $VH\_ROOT/logs/error.log {  
useServer 1  
logLevel DEBUG  
rollingSize 10M  
}

accesslog $VH\_ROOT/logs/access.log {  
useServer 0  
rollingSize 10M  
keepDays 30  
compressArchive 0  
}

index {  
useServer 0  
indexFiles index.html, index.php  
autoIndex 0  
autoIndexURI /\_autoindex/default.php  
}

errorpage 404 {  
url /error404.html  
}

expires {  
enableExpires 1  
}

accessControl {  
allow \*  
}

realm SampleProtectedArea {

userDB {  
location conf/vhosts/Example/htpasswd  
maxCacheSize 200  
cacheTimeout 60  
}

groupDB {  
location conf/vhosts/Example/htgroup  
maxCacheSize 200  
cacheTimeout 60  
}  
}

context /.well-known/ {  
location /usr/local/lsws/Example/html/  
allowBrowse 1  
addDefaultCharset off  
}

context / {  
type appserver  
location /usr/local/lsws/Example/html/demo/  
binPath /usr/local/lsws/fcgi-bin/lswsgi  
appType wsgi  
startupFile demo/wsgi.py  
env PYTHONHOME=/usr/local/lsws/Example/html/  
addDefaultCharset off  
}

rewrite {  
enable 1  
autoLoadHtaccess 1  
logLevel 0  
}

vhssl {  
keyFile /usr/local/lsws/conf/example.key  
certFile /usr/local/lsws/conf/example.crt  
certChain 1  
}

---

<div class="post-metadata">

**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\
**Post date:** [August 25, 2020, 9:12am UTC](https://community.letsencrypt.org/t/ssl-certbot-errors/131920/22 "2020-08-25T09:12:58Z")

</div>

Ah, I think I (finally) see what is happening.

The URL is being doubled up due to the way the configuration is written:

```
$ curl -X GET -i jeffwebsite.dev/.well-known/.well-known/acme-challenge/acme-test-2
HTTP/1.1 200 OK

```

Could you take this:

> [@Jeffy892](#):
>
> context /.well-known/ {  
> location /usr/local/lsws/Example/html/  
> allowBrowse 1  
> addDefaultCharset off  
> }

and change:

> [@Jeffy892](#):
>
> location /usr/local/lsws/Example/html/

to:

```
location /usr/local/lsws/Example/html/.well-known/

```

Then do a graceful restart of Litespeed.

Then try again:

```
sudo certbot certonly --webroot -w /usr/local/lsws/Example/html/ -d jeffwebsite.dev -d www.jeffwebsite.dev --dry-run

```

---

<div class="post-metadata">

**Author:** ![Jeffy892](https://avatars.discourse-cdn.com/v4/letter/j/ba9def/32.png) [@Jeffy892](https://community.letsencrypt.org/u/Jeffy892)\
**Post date:** [August 25, 2020, 9:19am UTC](https://community.letsencrypt.org/t/ssl-certbot-errors/131920/23 "2020-08-25T09:19:06Z")

</div>

omg it worked!

root@mywebsite:/usr/local/lsws/Example/html/demo# sudo certbot certonly --webroot -w /usr/local/lsws/Example/html/ -d jeffwebsite.dev -d www.jeffwebsite.dev  
Saving debug log to /var/log/letsencrypt/letsencrypt.log  
Plugins selected: Authenticator webroot, Installer None  
Obtaining a new certificate  
Performing the following challenges:  
http-01 challenge for jeffwebsite.dev  
http-01 challenge for www.jeffwebsite.dev  
Using the webroot path /usr/local/lsws/Example/html for all unmatched domains.  
Waiting for verification…  
Cleaning up challenges

IMPORTANT NOTES:

- Congratulations! Your certificate and chain have been saved at:  
/etc/letsencrypt/live/jeffwebsite.dev/fullchain.pem  
Your key file has been saved at:  
/etc/letsencrypt/live/jeffwebsite.dev/privkey.pem  
Your cert will expire on 2020-11-23. To obtain a new or tweaked  
version of this certificate in the future, simply run certbot  
again. To non-interactively renew _all_ of your certificates, run  
“certbot renew”

- If you like Certbot, please consider supporting our work by:

Thank you so much!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [September 24, 2020, 9:19am UTC](https://community.letsencrypt.org/t/ssl-certbot-errors/131920/24 "2020-09-24T09:19:10Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

[Previous page](https://community.letsencrypt.org/t/ssl-certbot-errors/131920.md?page=1)