# TLSsetup error: Challenge is invalid! **URL:** \ **Category:** Help\ **Created:** [June 18, 2023, 3:58am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248 "2023-06-18T03:58:25Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![soliue](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@soliue](https://community.letsencrypt.org/u/soliue)\ **Post date:** [June 18, 2023, 3:58am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/1 "2023-06-18T03:58:25Z")
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: **[seebytouch.com](http://seebytouch.com), [somatics.seebytouch.com](http://somatics.seebytouch.com)** I ran this command: **tls-setup.sh** via Terminal AND **/usr/local/bin/tls-setup.sh** via nearlyfreespeech's Scheduled Tasks It produced this output: > ERROR: Challenge is invalid! (returned: invalid) (result: > ["type"] "http-01" > ["status"] "invalid" > ["error","type"] "urn:ietf:params:acme:error:unauthorized" > ["error","detail"] "[208.94.118.182](http://208.94.118.182/): Invalid response from > [https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE:](https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE:) > 404" > ["error","status"] 403 > ["error"] {"type":"urn:ietf:params:acme:error:unauthorized","detail":"[208.94.118.182](http://208.94.118.182/): > Invalid response from > [https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE:](https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE:) > 404","status":403} > ["url"] "[https://acme-v02.api.letsencrypt.org/acme/chall-v3/237744091777/O2y8Bw](https://acme-v02.api.letsencrypt.org/acme/chall-v3/237744091777/O2y8Bw)" > ["token"] "CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE" > ["validationRecord",0,"url"] "[http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE](http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE)" > ["validationRecord",0,"hostname"] "[seebytouch.com](http://seebytouch.com/)" > ["validationRecord",0,"port"] "80" > ["validationRecord",0,"addressesResolved",0] "208.94.118.182" > ["validationRecord",0,"addressesResolved"] ["208.94.118.182"] > ["validationRecord",0,"addressUsed"] "208.94.118.182" > ["validationRecord",0] {"url":"[http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"80","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182](http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE%22,%22hostname%22:%22%5Bseebytouch.com%5D(http://seebytouch.com/)%22,%22port%22:%2280%22,%22addressesResolved%22:%5B%22208.94.118.182%22%5D,%22addressUsed%22:%22208.94.118.182)"} > ["validationRecord",1,"url"] "[https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE](https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE)" > ["validationRecord",1,"hostname"] "[seebytouch.com](http://seebytouch.com/)" > ["validationRecord",1,"port"] "443" > ["validationRecord",1,"addressesResolved",0] "208.94.118.182" > ["validationRecord",1,"addressesResolved"] ["208.94.118.182"] > ["validationRecord",1,"addressUsed"] "208.94.118.182" > ["validationRecord",1] {"url":"[https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"443","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182](https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE%22,%22hostname%22:%22%5Bseebytouch.com%5D(http://seebytouch.com/)%22,%22port%22:%22443%22,%22addressesResolved%22:%5B%22208.94.118.182%22%5D,%22addressUsed%22:%22208.94.118.182)"} > ["validationRecord"] [{"url":"[http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"80","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182"},{"url":"https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE","hostname":"[seebytouch.com](http://seebytouch.com/)","port":"443","addressesResolved":["208.94.118.182"],"addressUsed":"208.94.118.182](http://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE%22,%22hostname%22:%22%5Bseebytouch.com%5D(http://seebytouch.com/)%22,%22port%22:%2280%22,%22addressesResolved%22:%5B%22208.94.118.182%22%5D,%22addressUsed%22:%22208.94.118.182%22%7D,%7B%22url%22:%22https://seebytouch.com/.well-known/acme-challenge/CNk6L2uuJrZk5joY9y47LaEjshhe7zqs-5ow9lUD4RE%22,%22hostname%22:%22%5Bseebytouch.com%5D(http://seebytouch.com/)%22,%22port%22:%22443%22,%22addressesResolved%22:%5B%22208.94.118.182%22%5D,%22addressUsed%22:%22208.94.118.182)"}] > ["validated"] "2023-06-18T01:09:08Z") > /usr/local/bin/tls-setup.sh exited with return code 1 My web server is (include version): **Apache 2.4 Static Content** The operating system my web server runs on is (include version): **sorry, not sure how this is diff from web server. 🙁** [Likely: FreeBSD] My hosting provider, if applicable, is: **[nearlyfreespeech.net](http://nearlyfreespeech.net)** I can login to a root shell on my machine (yes or no, or I don't know): **yes I think so... through Terminal?** I'm using a control panel to manage my site (no, or provide the name and version of the control panel): **No** The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [June 18, 2023, 4:21am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/2 "2023-06-18T04:21:24Z")
Hi @soliue, and welcome to the LE community forum 🙂 Let's review the web server config with: `sudo apachectl -t -D DUMP_VHOSTS` ---
**Author:** ![soliue](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@soliue](https://community.letsencrypt.org/u/soliue)\ **Post date:** [June 18, 2023, 4:34am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/3 "2023-06-18T04:34:09Z")
I SSH'd into the server via terminal and typed this command but it says this: -bash: sudo: command not found Sorry if I'm doing it wrong. I really don't know my way around any of this! ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [June 18, 2023, 4:36am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/4 "2023-06-18T04:36:27Z")
Try just: `apachectl -t -D DUMP_VHOSTS` ---
**Author:** ![soliue](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@soliue](https://community.letsencrypt.org/u/soliue)\ **Post date:** [June 18, 2023, 4:47am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/5 "2023-06-18T04:47:02Z")
> [@rg305](#): > > apachectl -t -D DUMP\_VHOSTS It says: -bash: apachectl: command not found ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [June 18, 2023, 4:49am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/6 "2023-06-18T04:49:59Z")
Please show: `find /usr/local/etc/apache24 -name *.conf` ---
**Author:** ![soliue](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@soliue](https://community.letsencrypt.org/u/soliue)\ **Post date:** [June 18, 2023, 4:54am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/7 "2023-06-18T04:54:54Z")
> [@rg305](#): > > find /usr/local/etc/apache24 -name \*.conf find: /usr/local/etc/apache24: No such file or directory ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [June 18, 2023, 5:01am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/8 "2023-06-18T05:01:20Z")
Try these: `find / -name httpd.conf` `find / -name apache*.conf` ---
**Author:** ![soliue](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@soliue](https://community.letsencrypt.org/u/soliue)\ **Post date:** [June 18, 2023, 5:04am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/9 "2023-06-18T05:04:36Z")
> [@rg305](#): > > find / -name httpd.conf [tangiblegraphics /home/public]$ find / -name httpd.conf find: /var/log/munge: Permission denied find: /var/authpf: Permission denied find: /var/account: Permission denied find: /var/db/freebsd-update: Permission denied find: /var/db/entropy: Permission denied find: /var/db/etcupdate/current/var/crash: Permission denied find: /var/db/hyperv: Permission denied find: /var/db/ipf: Permission denied find: /var/cron: Permission denied find: /var/spool/dma: Permission denied find: /var/spool/clientmqueue: Permission denied find: /var/spool/opielocks: Permission denied find: /var/crash: Permission denied find: /var/lib/munge: Permission denied find: /var/lib/polkit-1: Permission denied find: /var/heimdal: Permission denied find: /var/audit: Permission denied find: /var/run/ppp: Permission denied find: /var/backups: Permission denied find: /root/.cpan/build/Test-NoTabs-2.02-0/lib/Test: Permission denied find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/author: Permission denied find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/release: Permission denied find: /etc/ntp: Permission denied ---
**Author:** ![soliue](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@soliue](https://community.letsencrypt.org/u/soliue)\ **Post date:** [June 18, 2023, 5:05am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/10 "2023-06-18T05:05:38Z")
> [@rg305](#): > > find / -name apache\*.conf [tangiblegraphics /home/public]$ find / -name apache\*.conf find: /var/log/munge: Permission denied find: /var/authpf: Permission denied find: /var/account: Permission denied find: /var/db/freebsd-update: Permission denied find: /var/db/entropy: Permission denied find: /var/db/etcupdate/current/var/crash: Permission denied find: /var/db/hyperv: Permission denied find: /var/db/ipf: Permission denied find: /var/cron: Permission denied find: /var/spool/dma: Permission denied find: /var/spool/clientmqueue: Permission denied find: /var/spool/opielocks: Permission denied find: /var/crash: Permission denied find: /var/lib/munge: Permission denied find: /var/lib/polkit-1: Permission denied find: /var/heimdal: Permission denied find: /var/audit: Permission denied find: /var/run/ppp: Permission denied find: /var/backups: Permission denied find: /root/.cpan/build/Test-NoTabs-2.02-0/lib/Test: Permission denied find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/author: Permission denied find: /root/.cpan/build/Test-NoTabs-2.02-0/xt/release: Permission denied find: /etc/ntp: Permission denied ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [June 18, 2023, 5:57am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/11 "2023-06-18T05:57:55Z")
You have very little access to that system. You should ask your HSP for help. ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [June 18, 2023, 8:28am UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/12 "2023-06-18T08:28:52Z")
Looks like nearlyfreespeech doesn't offer VPS et cetera and it looks they don't offer root access: [Frequently Asked Questions - NearlyFreeSpeech.NET](https://www.nearlyfreespeech.net/about/faq#Colo) So you probably need to take this up with your hosting provider indeed. By the way: > [@soliue](#): > > I'm using a control panel to manage my site (no, or provide the name and version of the control panel): **No** They claim they offer a "custom control panel": [https://www.nearlyfreespeech.net/](https://www.nearlyfreespeech.net/) They also have a FAQ entry about certificates: [Frequently Asked Questions - NearlyFreeSpeech.NET](https://www.nearlyfreespeech.net/about/faq#SSL) speaking about " streamlined tools we provide that work with the [Let's Encrypt](https://letsencrypt.org/) project to secure your site" ---
**Author:** ![soliue](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@soliue](https://community.letsencrypt.org/u/soliue)\ **Post date:** [June 18, 2023, 12:56pm UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/13 "2023-06-18T12:56:53Z")
Ok, I will do that. Thank you both so much! 🙏🙏🙏 ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [July 18, 2023, 12:57pm UTC](https://community.letsencrypt.org/t/tlssetup-error-challenge-is-invalid/200248/14 "2023-07-18T12:57:49Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.