TLSsetup error: Challenge is invalid!

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: seebytouch.com, somatics.seebytouch.com

I ran this command: tls-setup.sh via Terminal AND /usr/local/bin/tls-setup.sh via nearlyfreespeech's Scheduled Tasks

It produced this output:

ERROR: Challenge is invalid! (returned: invalid) (result:
["type"] "http-01"
["status"] "invalid"
["error","type"] "urn:ietf:params:acme:error:unauthorized"
["error","detail"] "208.94.118.182: Invalid response from
https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE:
404"
["error","status"] 403
["error"] {"type":"urn:ietf:params:acme:error:unauthorized","detail":"208.94.118.182:
Invalid response from
https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE:
404","status":403}
["url"] "https://acme-v02.api.letsencrypt.org/acme/chall-v3/237744091777/O2y8Bw"
["token"] "CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE"
["validationRecord",0,"url"] "http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE"
["validationRecord",0,"hostname"] "seebytouch.com"
["validationRecord",0,"port"] "80"
["validationRecord",0,"addressesResolved",0] "208.94.118.182"
["validationRecord",0,"addressesResolved"] ["208.94.118.182"]
["validationRecord",0,"addressUsed"] "208.94.118.182"
["validationRecord",0] {"url":"http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"80","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182"}
["validationRecord",1,"url"] "https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE"
["validationRecord",1,"hostname"] "seebytouch.com"
["validationRecord",1,"port"] "443"
["validationRecord",1,"addressesResolved",0] "208.94.118.182"
["validationRecord",1,"addressesResolved"] ["208.94.118.182"]
["validationRecord",1,"addressUsed"] "208.94.118.182"
["validationRecord",1] {"url":"https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"443","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182"}
["validationRecord"] [{"url":"http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"80","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182"},{"url":"https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"443","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182"}]
["validated"] "2023-06-18T01:09:08Z")
/usr/local/bin/tls-setup.sh exited with return code 1

My web server is (include version): Apache 2.4 Static Content

The operating system my web server runs on is (include version): sorry, not sure how this is diff from web server. :slightly_frowning_face: [Likely: FreeBSD]

My hosting provider, if applicable, is: nearlyfreespeech.net

I can login to a root shell on my machine (yes or no, or I don't know): yes I think so... through Terminal?

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Hi @soliue, and welcome to the LE community forum :slight_smile:

Let's review the web server config with:
sudo apachectl -t -D DUMP_VHOSTS

I SSH'd into the server via terminal and typed this command but it says this:

-bash: sudo: command not found

Sorry if I'm doing it wrong. I really don't know my way around any of this!

Try just:
apachectl -t -D DUMP_VHOSTS

It says:
-bash: apachectl: command not found

Please show:
find /usr/local/etc/apache24 -name *.conf

find: /usr/local/etc/apache24: No such file or directory

Try these:
find / -name httpd.conf
find / -name apache*.conf

[tangiblegraphics /home/public]$ find / -name httpd.conf

find: /var/log/munge: Permission denied

find: /var/authpf: Permission denied

find: /var/account: Permission denied

find: /var/db/freebsd-update: Permission denied

find: /var/db/entropy: Permission denied

find: /var/db/etcupdate/current/var/crash: Permission denied

find: /var/db/hyperv: Permission denied

find: /var/db/ipf: Permission denied

find: /var/cron: Permission denied

find: /var/spool/dma: Permission denied

find: /var/spool/clientmqueue: Permission denied

find: /var/spool/opielocks: Permission denied

find: /var/crash: Permission denied

find: /var/lib/munge: Permission denied

find: /var/lib/polkit-1: Permission denied

find: /var/heimdal: Permission denied

find: /var/audit: Permission denied

find: /var/run/ppp: Permission denied

find: /var/backups: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/lib/Test: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/author: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/release: Permission denied

find: /etc/ntp: Permission denied

[tangiblegraphics /home/public]$ find / -name apache*.conf

find: /var/log/munge: Permission denied

find: /var/authpf: Permission denied

find: /var/account: Permission denied

find: /var/db/freebsd-update: Permission denied

find: /var/db/entropy: Permission denied

find: /var/db/etcupdate/current/var/crash: Permission denied

find: /var/db/hyperv: Permission denied

find: /var/db/ipf: Permission denied

find: /var/cron: Permission denied

find: /var/spool/dma: Permission denied

find: /var/spool/clientmqueue: Permission denied

find: /var/spool/opielocks: Permission denied

find: /var/crash: Permission denied

find: /var/lib/munge: Permission denied

find: /var/lib/polkit-1: Permission denied

find: /var/heimdal: Permission denied

find: /var/audit: Permission denied

find: /var/run/ppp: Permission denied

find: /var/backups: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/lib/Test: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/author: Permission denied

find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/release: Permission denied

find: /etc/ntp: Permission denied

You have very little access to that system.
You should ask your HSP for help.

Looks like nearlyfreespeech doesn't offer VPS et cetera and it looks they don't offer root access: Frequently Asked Questions - NearlyFreeSpeech.NET

So you probably need to take this up with your hosting provider indeed.

By the way:

They claim they offer a "custom control panel": https://www.nearlyfreespeech.net/

They also have a FAQ entry about certificates: Frequently Asked Questions - NearlyFreeSpeech.NET speaking about " streamlined tools we provide that work with the Let's Encrypt project to secure your site"

Ok, I will do that.

Thank you both so much! :pray::pray::pray: