Hi, I've started to get random errors with my auto-renews: Error: Invalid response from http://cdn.steampunkjunkies.com/.well-known/acme-challenge/-tuN8Fn96y1pClaOOlIAliFEIjoeRX2HqfTw1mN2eQQ: \ This is run using VestaCP, with: sudo /usr/local/vesta/bin/v-update-letsencrypt-ssl This works perf…

Hi, We finally got to the bottom of it :slight_smile: Apparently, VestaCP uses keys for LE that are based on the email address. According to the Vesta tech I spoke to, you need to have a unique email address per account (not domain, but user account), otherwise it goes weird. I’m a bit confused as…

if you are using Digital Ocean , they have DNS problems now causing LE to fail Renewals.

Thanks for the reply. This is actually with Linode. I wonder if they are having the same problem :confused: They don’t expire for another 2 weeks - but I always panic when I get errors, as there is the potential its not fixed by the time they expire :astonished: Cheers Andy

I think they both use Cloudflare DNS Firewall.

[image] Lets encrypt refusing to connect to my domain on renew , and now it is saying limit reached Help …

Hi @steampunkjnkies , sorry to hear you're running into issues renewing. The random timing definitely sounds frustrating! [image] steampunkjnkies: Thanks for the reply. This is actually with Linode. I wonder if they are having the same problem :confused: This seems unrelated to the DNS proble…

Hi @cpu , Thanks for the reply. It's very odd, as it was working fine before, and I've not updated any of the core VestaCP software, so I don't think thats the problem. Looking at the logs from our end it seems like there is a misconfiguration on your challenge response webserver. Instead of retur…

[image] steampunkjnkies: Mmm interesting. Do you have the IP address that it is calling for that? It was 2a01:7e00::f03c:91ff:feac:4983 - which also explains why this was working for you before but fails now. We recently began preferring IPv6 addresses for dual-homed hosts . It seems like you…

Hi, Thanks for looking into this. I'm a bit confused as to why it doesn't want to work with IPv6 :confused: From another server, I just run: root@admin:~# curl -v -g -6 " http://cdn.steampunkjunkies.com/.well-known/acme-challenge/foo " Trying 2a01:7e00::f03c:91ff:feac:4983... Connected to cdn.ste…

I’m still battling with this one :frowning: It connects fine with ipv6 my end (from another server); root@admin:~# curl -v -g -6 "http://admin.chambresdhotesfrance.com/.well-known/acme-challenge/foo" * Trying 2a01:7e00::f03c:91ff:febc:64f3... * Connected to admin.chambresdhotesfrance.com (2a01:7…

Hi, OK, so I'm really not sure this is an IPv6 issue. I removed the AAAA records for cdn.steampunkjunkies.com , and have let it update mxtoolbox shows it as non-existing now. However, I still get this error: sudo /usr/local/vesta/bin/v-update-letsencrypt-ssl Error: Invalid response from http://cd…

VestaCP: Invalid HTTP-01 challenge response, XHTML document

Help

v3ss0n June 21, 2017, 12:49pm 5

Topic		Replies	Views
VinstaCP issuance problem - frustration with failed validation rate limit Help	14	8851	April 13, 2017
Letsencrypt-vesta Client Error - The key authorization file from the server did not match Help	25	20494	April 28, 2017
VestaCP - Hard Coded Replies in Nginx Config Not working Help	6	2679	September 18, 2017
Error when renewing certificate on CWP Server	8	4034	July 30, 2017
DNS problem: SERVFAIL looking up A Help	24	4722	January 14, 2020

VestaCP: Invalid HTTP-01 challenge response, XHTML document

Related topics