Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com ), so withholding your domain name here does not increase secrecy, but …

[image] casajaguar: certbot 0.27.0 There should be a newer version out there. [not critical but an upgrade is recommended] What is the expected action by HAproxy when processing the challenge requests? http://onlyoffice.casajaguar.com.ar/.well-known/acme-challenge/\ I see that in the erro…

Will update thanks. Haproxy detects “.well-know…) tonredirect traffic to letsencrypt server. acl letsencrypt-acl path_beg /.well-known/acme-challenge/ And has other acl for each url-server behind In this case server was shutdown that why 503. I had use this configuration for haproxy and letsenc…

So… is everything working as you would like it?

No…I’ve tried to explain to you my configuration. When I try to renew certificates with certbot renew --force-renewal --tls-sni-01-port=54321 I received those Failed authorization errors. Regards

[image] casajaguar: --tls-sni-01-port=54321 I see two problems with that request. TLS-SNI-01 is no longer supported. Port 54321 is not within the allowed authentication ports (80, 443) It will most likely just be ignored and use HTTP on port 80. [which is being redirected to HTTPS on port…

[image] casajaguar: --force-renewal --dry-run Also those two choices are more mutually exclusive than complementing each other. --force-renewal will force an actual renewal (even if the cert doesn't need to be renewed) while --dry-run tries to simulate/validate the renewal process (but doe…

I know. I’ve tried now turning off haproxy and making the lets encrypt server listening in 80/443. I had do certbot renew —dry-run. With this result. The following errors were reported by the server: Domain: cloud.casajaguar.com.ar Type: unauthorized Detail: Invalid response from https://clo…

[image] rg305: What is the expected action by HAproxy when processing the challenge requests? http://onlyoffice.casajaguar.com.ar/.well-known/acme-challenge/

Your system connects to LE. When LE tries to connect back (to verify) it fails with err message: [image] casajaguar: Detail: Invalid response from https://onlyoffice.casajaguar.com.ar/.well-known/acme-challenge/wytodJQX60lRZfqU2xhyTikasu5yjeKIJcveCFrlJkE [181.239.74.38] Those inbound conn…

Type: unauthorised Detail: Invalid response from

Help

casajaguar June 5, 2020, 9:35pm 10

Send the request to the LE standalone server.

Topic		Replies	Views
Unable to issue or renew some certificats Help	6	1262	March 17, 2020
Need Help, Please Help	15	2059	December 10, 2019
Recently encountered errors renewing on an HAProxy server using Standalone method with Certbot Help	15	1831	May 5, 2022
[Solved] Failure renewing certs with certbot behind reverse proxy Help	18	7534	September 18, 2018
Haproxy / tls / renew not working Help	6	4895	December 20, 2018

Type: unauthorised Detail: Invalid response from

Related topics