Unable to create single cert first try for me

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:plspro.com

I ran this command:
[root@testvm certs]# certbot certonly --webroot -w /var/www/html -d testvm.plspro.com.com --dry-run
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Simulating a certificate request for testvm.plspro.com.com

It produced this output:
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: testvm.plspro.com.com
Type: unauthorized
Detail: Invalid response from http://testvm.plspro.com.com/.well-known/acme-challenge/B9F10ZjDNi5VA3d_sADcKb_Oamv4XcVkkqM1N7kfJVE [45.11.57.36]: "\r\n404 Not Found\r\n\r\n

404 Not Found

\r\n
nginx/1.18.0 (Ub"

Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
[root@testvm certs]#

My web server is (include version):slight_smile:
[root@testvm certs]# apachectl -v
Server version: Apache/2.4.6 (Red Hat Enterprise Linux)
Server built: Oct 29 2021 12:32:51
[root@testvm certs]#

The operating system my web server runs on is (include version):rhel 7

My hosting provider, if applicable, is: n/a

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
[root@testvm certs]# certbot --version
certbot 1.21.0
[root@testvm certs]#

1 Like

Please ignore the com.com

[root@testvm certs]# certbot certonly --webroot -w /var/www/html -d testvm.plspro.com --dry-run
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Simulating a certificate request for testvm.plspro.com

Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: testvm.plspro.com
Type: unauthorized
Detail: Invalid response from Business profile for plspro.com provided by Network Solutions [205.178.189.129]: "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-"

Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
[root@testvm certs]#

1 Like

I am assuming there is something in the hint -
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

Not sure what that means.

1 Like

Hi Chris (@ccheltenham), Welcome to the LE community.

Network Solutions sells their own certificates - as shown by your apex domain of plspro.com. They do not give you root access, but will install a free LE cert for you for a charge (US$59.99?). With this hosting provider, whether you buy one of their certs or obtain a free LE cert, they are the one who will have to install it - for a charge. :unamused:

Here's two links, an older one and a fairly recent one discussing Network Solutions and LE certs.

You may want to switch to another hosting provider that allows you to install your own (LE) certificate. There's a long list of hosting providers at this link who support Lets Encrypt free certs.

6 Likes

I see ok. I can't do that.
Ok I'll let you know.

Thanks

2 Likes
Name:    testvm.plspro.com
Address: 205.178.189.129

Name:    underconstruction.networksolutions.com
Address: 205.178.189.129

You need a working HTTP site before you can secure it (via HTTP authentication).
An "under construction" page does NOT count as a working HTTP site.

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.