# Verification failed due tp The URL looks like it is blocking bots and which inadvertently blocks our servers from receiving the correct content **URL:** \ **Category:** Help\ **Created:** [November 27, 2018, 6:04am UTC](https://community.letsencrypt.org/t/verification-failed-due-tp-the-url-looks-like-it-is-blocking-bots-and-which-inadvertently-blocks-our-servers-from-receiving-the-correct-content/78544 "2018-11-27T06:04:09Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![rkbmmec](https://avatars.discourse-cdn.com/v4/letter/r/ecb155/32.png) [@rkbmmec](https://community.letsencrypt.org/u/rkbmmec)\ **Post date:** [November 27, 2018, 6:04am UTC](https://community.letsencrypt.org/t/verification-failed-due-tp-the-url-looks-like-it-is-blocking-bots-and-which-inadvertently-blocks-our-servers-from-receiving-the-correct-content/78544/1 "2018-11-27T06:04:09Z")
Hello TEAM, I have try to generate ssl certificate from [https://www.sslforfree.com/](https://www.sslforfree.com/) for [cbseresults.nic.in](http://cbseresults.nic.in) but unable to generate it and getting following message every browser and every computer. [https://www.sslforfree.com/create?verify\_manual&domains=cbseresults.nic.in](https://www.sslforfree.com/create?verify_manual&domains=cbseresults.nic.in) Domain “[cbseresults.nic.in](http://cbseresults.nic.in)” challenge3 failed. Response from “[https://acme-v02.api.letsencrypt.org/acme/challenge/UqgegkbCOw14E\_NZZHeZU3-GmlBrB4ZiaWy1yBERzXg/9688843285](https://acme-v02.api.letsencrypt.org/acme/challenge/UqgegkbCOw14E_NZZHeZU3-GmlBrB4ZiaWy1yBERzXg/9688843285)” was: ### Warning: Your verification URL is not returning the correct contents to our verification servers. The URL looks like it is blocking bots and which inadvertently blocks our servers from receiving the correct content. Contact your host, a professional developer or admin for further help with fixing it. Error: Invalid response from [http://cbseresults.nic.in/.well-known/acme-challenge/jrF4x0Kxu7jY1J3cGHA-H-b6fhMUGl1rfwZuZylCieo:](http://cbseresults.nic.in/.well-known/acme-challenge/jrF4x0Kxu7jY1J3cGHA-H-b6fhMUGl1rfwZuZylCieo:) “\\\\\var y=window\\var x={o:’/XOgWQP/.well-known/acme-challenge/jrF4x0Kxu7” Full Error: { “type”: “http-01”, “status”: “invalid”, “error”: { “type”: “urn:ietf:params:acme:error:unauthorized”, “detail”: "Invalid response from [http://cbseresults.nic.in/.well-known/acme-challenge/jrF4x0Kxu7jY1J3cGHA-H-b6fhMUGl1rfwZuZylCieo:](http://cbseresults.nic.in/.well-known/acme-challenge/jrF4x0Kxu7jY1J3cGHA-H-b6fhMUGl1rfwZuZylCieo:) “\u003c!DOCTYPE html\u003e\u003chtml\u003e\u003ctitle\u003e\u003c/title\u003e\u003cscript\u003evar y=window\u003c/script\u003e\u003cscript\u003evar x={o:’/XOgWQP/.well-known/acme-challenge/jrF4x0Kxu7"”, “status”: 403 }, “url”: “[https://acme-v02.api.letsencrypt.org/acme/challenge/UqgegkbCOw14E\_NZZHeZU3-GmlBrB4ZiaWy1yBERzXg/9688843285](https://acme-v02.api.letsencrypt.org/acme/challenge/UqgegkbCOw14E_NZZHeZU3-GmlBrB4ZiaWy1yBERzXg/9688843285)”, “token”: “jrF4x0Kxu7jY1J3cGHA-H-b6fhMUGl1rfwZuZylCieo”, “validationRecord”: [{ “url”: “[http://cbseresults.nic.in/.well-known/acme-challenge/jrF4x0Kxu7jY1J3cGHA-H-b6fhMUGl1rfwZuZylCieo](http://cbseresults.nic.in/.well-known/acme-challenge/jrF4x0Kxu7jY1J3cGHA-H-b6fhMUGl1rfwZuZylCieo)”, “hostname”: “[cbseresults.nic.in](http://cbseresults.nic.in)”, “port”: “80”, “addressesResolved”: [“164.100.118.41”], “addressUsed”: “164.100.118.41” } ] } My domain is:cbseresults.nic.in My web server is (include version): IIS 7.x The operating system my web server runs on is (include version): windows server 2008 r2 Regards ---
**Author:** ![jared.m](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jared.m/32/17871_2.png) [@jared.m](https://community.letsencrypt.org/u/jared.m)\ **Post date:** [November 27, 2018, 6:16am UTC](https://community.letsencrypt.org/t/verification-failed-due-tp-the-url-looks-like-it-is-blocking-bots-and-which-inadvertently-blocks-our-servers-from-receiving-the-correct-content/78544/2 "2018-11-27T06:16:18Z")
It appears that you have some javascript in place to verify that your site is being visited by a browser, as opposed to an automated program. Unfortunately for you, Let’s Encrypt’s retrieval of the challenge _is_ an automated program, and must receive the actual contents of the challenge file. It will not execute some javascript code to get there. Are you passing your traffic through a CDN, such as CloudFlare? Are you aware of something you may have put in place to block programmatic access to your website? You will need to disable this, if possible, for the `.well-known/acme-challenge` directory, or if not, altogether. The only other way to get a certificate would be to use the DNS challenge type instead, as this doesn’t require a connection directly to your server. Unfortunately, it can also present different challenges for automation. ---
**Author:** ![rkbmmec](https://avatars.discourse-cdn.com/v4/letter/r/ecb155/32.png) [@rkbmmec](https://community.letsencrypt.org/u/rkbmmec)\ **Post date:** [November 27, 2018, 7:40am UTC](https://community.letsencrypt.org/t/verification-failed-due-tp-the-url-looks-like-it-is-blocking-bots-and-which-inadvertently-blocks-our-servers-from-receiving-the-correct-content/78544/3 "2018-11-27T07:40:57Z")
Hello Team, I have upload one under cunstrction html file for cbseresults.nic.in and this link verify by browser please open it [http://cbseresults.nic.in/.well-known/acme-challenge/vdMho8JAgMv5K4nYETo7EHVSg9-sFEd3Cm88qFKSfJI](http://cbseresults.nic.in/.well-known/acme-challenge/vdMho8JAgMv5K4nYETo7EHVSg9-sFEd3Cm88qFKSfJI) still getting same issue regards ---
**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\ **Post date:** [November 27, 2018, 7:50am UTC](https://community.letsencrypt.org/t/verification-failed-due-tp-the-url-looks-like-it-is-blocking-bots-and-which-inadvertently-blocks-our-servers-from-receiving-the-correct-content/78544/4 "2018-11-27T07:50:49Z")
There’s definitely some kind of web application firewall (WAF) or proxy sitting in front of your web server. See these responses: ``` $ curl -i http://cbseresults.nic.in/.well-known/acme-challenge/vdMho8JAgMv5K4nYETo7EHVSg9-sFEd3Cm88qFKSfJI HTTP/1.1 200 OK Connection: close Pragma: no-cache cache-control: no-cache Content-Type: text/html Content-Length: 247 $ curl -i http://cbseresults.nic.in/.well-known/acme-challenge/vdMho8JAgMv5K4nYETo7EHVSg9-sFEd3Cm88qFKSfJI HTTP/1.1 302 Found Connection: close Pragma: no-cache cache-control: no-cache Location: /.well-known/acme-challenge/vdMho8JAgMv5K4nYETo7EHVSg9-sFEd3Cm88qFKSfJI ``` Basically as jared.m already mentioned, you’ll need to find some way to disable the interception of these requests, or you won’t be able to use Let’s Encrypt’s HTTP validation method. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [December 27, 2018, 7:50am UTC](https://community.letsencrypt.org/t/verification-failed-due-tp-the-url-looks-like-it-is-blocking-bots-and-which-inadvertently-blocks-our-servers-from-receiving-the-correct-content/78544/5 "2018-12-27T07:50:52Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.