TLSsetup error: Challenge is invalid!

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: seebytouch.com, somatics.seebytouch.com

I ran this command: tls-setup.sh via Terminal AND /usr/local/bin/tls-setup.sh via nearlyfreespeech's Scheduled Tasks

It produced this output:

ERROR: Challenge is invalid! (returned: invalid) (result:
["type"] "http-01"
["status"] "invalid"
["error","type"] "urn:ietf:params:acme:error:unauthorized"
["error","detail"] "208.94.118.182: Invalid response from
https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE:
404"
["error","status"] 403
["error"] {"type":"urn:ietf:params:acme:error:unauthorized","detail":"208.94.118.182:
Invalid response from
https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE:
404","status":403}
["url"] "https://acme-v02.api.letsencrypt.org/acme/chall-v3/237744091777/O2y8Bw"
["token"] "CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE"
["validationRecord",0,"url"] "http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE"
["validationRecord",0,"hostname"] "seebytouch.com"
["validationRecord",0,"port"] "80"
["validationRecord",0,"addressesResolved",0] "208.94.118.182"
["validationRecord",0,"addressesResolved"] ["208.94.118.182"]
["validationRecord",0,"addressUsed"] "208.94.118.182"
["validationRecord",0] {"url":"http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"80","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182"}
["validationRecord",1,"url"] "https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE"
["validationRecord",1,"hostname"] "seebytouch.com"
["validationRecord",1,"port"] "443"
["validationRecord",1,"addressesResolved",0] "208.94.118.182"
["validationRecord",1,"addressesResolved"] ["208.94.118.182"]
["validationRecord",1,"addressUsed"] "208.94.118.182"
["validationRecord",1] {"url":"https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"443","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182"}
["validationRecord"] [{"url":"http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"80","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182"},{"url":"https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"443","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182"}]
["validated"] "2023-06-18T01:09:08Z")
/usr/local/bin/tls-setup.sh exited with return code 1

My web server is (include version): Apache 2.4 Static Content

The operating system my web server runs on is (include version): sorry, not sure how this is diff from web server. :slightly_frowning_face: [Likely: FreeBSD]

My hosting provider, if applicable, is: nearlyfreespeech.net

I can login to a root shell on my machine (yes or no, or I don't know): yes I think so... through Terminal?

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Hi @soliue, and welcome to the LE community forum :slight_smile:

Let's review the web server config with:
sudo apachectl -t -D DUMP_VHOSTS

3 Likes

I SSH'd into the server via terminal and typed this command but it says this:

-bash: sudo: command not found

Sorry if I'm doing it wrong. I really don't know my way around any of this!

Try just:
apachectl -t -D DUMP_VHOSTS

2 Likes

It says:
-bash: apachectl: command not found

Please show:
find /usr/local/etc/apache24 -name *.conf

2 Likes

find: /usr/local/etc/apache24: No such file or directory

Try these:
find / -name httpd.conf
find / -name apache*.conf

2 Likes

[tangiblegraphics /home/public]$ find / -name httpd.conf

find: /var/log/munge: Permission denied

find: /var/authpf: Permission denied

find: /var/account: Permission denied

find: /var/db/freebsd-update: Permission denied

find: /var/db/entropy: Permission denied

find: /var/db/etcupdate/current/var/crash: Permission denied

find: /var/db/hyperv: Permission denied

find: /var/db/ipf: Permission denied

find: /var/cron: Permission denied

find: /var/spool/dma: Permission denied

find: /var/spool/clientmqueue: Permission denied

find: /var/spool/opielocks: Permission denied

find: /var/crash: Permission denied

find: /var/lib/munge: Permission denied

find: /var/lib/polkit-1: Permission denied

find: /var/heimdal: Permission denied

find: /var/audit: Permission denied

find: /var/run/ppp: Permission denied

find: /var/backups: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/lib/Test: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/author: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/release: Permission denied

find: /etc/ntp: Permission denied

[tangiblegraphics /home/public]$ find / -name apache*.conf

find: /var/log/munge: Permission denied

find: /var/authpf: Permission denied

find: /var/account: Permission denied

find: /var/db/freebsd-update: Permission denied

find: /var/db/entropy: Permission denied

find: /var/db/etcupdate/current/var/crash: Permission denied

find: /var/db/hyperv: Permission denied

find: /var/db/ipf: Permission denied

find: /var/cron: Permission denied

find: /var/spool/dma: Permission denied

find: /var/spool/clientmqueue: Permission denied

find: /var/spool/opielocks: Permission denied

find: /var/crash: Permission denied

find: /var/lib/munge: Permission denied

find: /var/lib/polkit-1: Permission denied

find: /var/heimdal: Permission denied

find: /var/audit: Permission denied

find: /var/run/ppp: Permission denied

find: /var/backups: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/lib/Test: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/author: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/release: Permission denied

find: /etc/ntp: Permission denied

You have very little access to that system.
You should ask your HSP for help.

2 Likes

Looks like nearlyfreespeech doesn't offer VPS et cetera and it looks they don't offer root access: Frequently Asked Questions - NearlyFreeSpeech.NET

So you probably need to take this up with your hosting provider indeed.

By the way:

They claim they offer a "custom control panel": https://www.nearlyfreespeech.net/

They also have a FAQ entry about certificates: Frequently Asked Questions - NearlyFreeSpeech.NET speaking about " streamlined tools we provide that work with the Let's Encrypt project to secure your site"

4 Likes

Ok, I will do that.

Thank you both so much! :pray::pray::pray:

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.