Verify Ownership: Domain challenge failed... Timeout 400

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: audi-approved-plus.com

I ran this command: https://gethttpsforfree.com/

It produced this output:
Error: Domain challenge failed. Please start back at Step 1. { “type”: “http-01”, “status”: “invalid”, “error”: { “type”: “urn:acme:error:connection”, “detail”: “Fetching http://audi-approved-plus.com/.well-known/acme-challenge/beAj0S4KPKIVBHRBBwqe-K98oMvGkASt_2ir2mWDj6E: Timeout”, “status”: 400 }, “uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/NfMqWas94lThsHPqWpl36SsUdR5xjqHrvD6fZOuzCXU/1992003466”, “token”: “beAj0S4KPKIVBHRBBwqe-K98oMvGkASt_2ir2mWDj6E”, “keyAuthorization”: “beAj0S4KPKIVBHRBBwqe-K98oMvGkASt_2ir2mWDj6E.QkI13M4P2eX421TNB5P8QEfYa7YHdAoXFIH3ItRx_ys”, “validationRecord”: [ { “url”: “http://audi-approved-plus.com/.well-known/acme-challenge/beAj0S4KPKIVBHRBBwqe-K98oMvGkASt_2ir2mWDj6E”, “hostname”: “audi-approved-plus.com”, “port”: “80”, “addressesResolved”: [ “88.99.148.16”, “2a01:4f8:10a:2c4f::2” ], “addressUsed”: “2a01:4f8:10a:2c4f::2”, “addressesTried”: [] } ] }

My web server is (include version):

The operating system my web server runs on is (include version):
37~16.04.1-Ubuntu SMP

My hosting provider, if applicable, is: na

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

2

Hi @simmbiote,

As you can see, your domain resolves two ips (IPv4 and IPv6), while your site can be reached using IPv4:

$ curl -4ikL http://audi-approved-plus.com/.well-known/acme-challenge/test
HTTP/1.1 200 OK
Server: nginx/1.11.9
Date: Fri, 15 Sep 2017 18:23:02 GMT
Content-Type: application/octet-stream
Content-Length: 16
Last-Modified: Fri, 15 Sep 2017 15:16:02 GMT
Connection: keep-alive
ETag: "59bbeeb2-10"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes

FORGE TEST FILE

it can't be reached using IPv6 address:

$ curl -6ikL http://audi-approved-plus.com/.well-known/acme-challenge/test
curl: (7) Failed to connect to audi-approved-plus.com port 80: Connection timed out

Let's Encrypt prefers IPv6 over IPv4 so you need to fix your IPv6 connectivity issues or remove the AAAA record for your domain.

Cheers,
sahsanu

3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.