The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet

Help
1

My domain is: klinikrnm.idemedika.com

I ran this command: sudo certbot --apache

It produced this output:
Requesting a certificate for klinikrnm.idemedika.com and www.klinikrnm.idemedika.com

Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: klinikrnm.idemedika.com
Type: unauthorized
Detail: 2a02:4780:3:c078::7: Invalid response from http://klinikrnm.idemedika.com/.well-known/acme-challenge/XxuLBDYUM3LA7uEWeB1tRRlriVAr4ZjugVJcwXFSOsE: 404

Domain: www.klinikrnm.idemedika.com
Type: unauthorized
Detail: 2a02:4780:3:c078::7: Invalid response from http://www.klinikrnm.idemedika.com/.well-known/acme-challenge/cmQtMeciMBEgLRo8WdSDCHGK5GlaiutoOj53RYvfZ6U: 404

Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version): Apache2

The operating system my web server runs on is (include version): Ubuntu 22.04

My hosting provider, if applicable, is: niagahoster.com

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 1.21.0

2

There's a discrepancy between the IPv4 address and the IPv6 address configured for your domain/hostnames. Using IPv4, an Apache webserver is sending a reply, but using IPv6 the webserver identifies itself as a LiteSpeed server.

3

Thanks for your answer. So what will I do ? I ask my hosting provider ?

4

I don't know who manages the IP addresses of the server or the DNS of your domain. You say you have root access: don't you have management over the IP addresses of the server?

5

Yes I have root access. I use VPS from hosting provider, so I don't manage my server IP addresses

6

But do you have access to the DNS zone of your domain?

And can you see which IP addresses are assigned to your VPS?

It's not rocket science this, really :slight_smile:

7

Owh, yes I have access to zone editor. I have set the subdomain to the correct VPS IP. But I still get response like my post

8

I still see the same IP addresses, maybe it needs to propogate yet. That said, I'm directly asking the niagahosting nameservers, so I'm a little bit doubtful.

Can you please share the IP addresses assigned to your VPS (screenshot of your hosting providers management panel?) and the settings of your DNS zone?

9

Sorry, problem is solved. I already delete zone editor type AAAA in my subdomain. So certbot success.

Thank you @Osiris

10

I recommend using IPv6 in general, as there are users with IPv6-only internet connections. I couldn't find any statistics on how many exactly just now, but I know they're out there.