LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 05-11-2019, 03:08 PM   #1
abdrahimben1991
LQ Newbie
 
Registered: Mar 2019
Location: algeria
Distribution: ubuntu,centOS,Fedora
Posts: 2

Rep: Reputation: Disabled
Unhappy i have problem with let's encrypt


I was trying to renew certs for my subdomain my_website
Code:
server {
    client_max_body_size 100M;
    server_tokens off;

        root /usr/share/nginx/html;

        index index.html index.php  index.htm index.nginx-debian.html;

        server_name status.my_website;

        location / {

    try_files $uri $uri/ /index.php?$query_string;

        }

#location / {
# proxy_set_header Host $host;
# proxy_pass https://stats.uptimerobot.com;
# }

location ~ \.php$ {
client_max_body_size 32m;
    try_files $uri =404;
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_intercept_errors on;
    fastcgi_pass unix:/run/php/php7.1-fpm.sock;
    fastcgi_index index.php;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    include fastcgi_params;
     }


    listen [::]:443 ssl; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/my_website/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/my_website/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
    if ($host = status.my_website) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 80;
    listen [::]:80;

        server_name status.ipfinder.io;
    return 404; # managed by Certbot
 	# Bad Bot Blocker
#	include /etc/nginx/bots.d/ddos.conf; 
# 	include /etc/nginx/bots.d/blockbots.conf;
 


}


Code:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/my_website.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator nginx, Installer nginx
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for api.my_website
http-01 challenge for app.my_website
http-01 challenge for my_website
http-01 challenge for www.my_website
http-01 challenge for status.my_website
Waiting for verification...
Cleaning up challenges
Attempting to renew cert (my_website) from /etc/letsencrypt/renewal/my_website.conf produced an unexpected error: Failed authorization procedure. status.ipfinder.io (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from https://status.ipfinder.io/.well-known/acme-challenge/crgdXWqfBxS95yWNxe_5iZWAuJnSWRkDutW2asS-cSE [192.169.82.22]: "<!DOCTYPE html>\n<html>\n    <head>\n        <meta name=\"robots\" content=\"noindex,nofollow\" />\n        <style>\n            /* Copyr". Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/my_website/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/my_website/fullchain.pem (failure)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: my_website
   Type:   unauthorized
   Detail: Invalid response from
   https://my.web.site/.well-known/acme-challenge/crgdXWqfBxS95yWNxe_5iZWAuJnSWRkDutW2asS-cSE
   [192.169.82.22]: "<!DOCTYPE html>\n<html>\n    <head>\n
   <meta name=\"robots\" content=\"noindex,nofollow\" />\n
   <style>\n            /* Copyr"

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

thank you

Last edited by michaelk; 05-12-2019 at 08:33 PM. Reason: website URL obsubficated.
 
Old 05-12-2019, 12:09 AM   #2
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 12,477
Blog Entries: 9

Rep: Reputation: 3377Reputation: 3377Reputation: 3377Reputation: 3377Reputation: 3377Reputation: 3377Reputation: 3377Reputation: 3377Reputation: 3377Reputation: 3377Reputation: 3377
Quote:
Originally Posted by abdrahimben1991 View Post
Code:
(...)
Attempting to renew cert (example.com) from /etc/letsencrypt/renewal/example.com.conf produced an unexpected error: Failed authorization procedure. example.com (http-01): urn:ietf:params:acme:error:unauthorized :: 
The client lacks sufficient authorization
(...)
this seems fairly obvious, or should give you some pointers at least.
 
Old 05-16-2019, 08:14 PM   #3
abdrahimben1991
LQ Newbie
 
Registered: Mar 2019
Location: algeria
Distribution: ubuntu,centOS,Fedora
Posts: 2

Original Poster
Rep: Reputation: Disabled
fixed i deleted DNS RECORD
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Let's Automate Let's Encrypt LXer Syndicated Linux News 0 11-01-2016 06:51 AM
LXer: Let's Encrypt Aiming to Encrypt the Web LXer Syndicated Linux News 0 09-13-2016 03:11 AM
LXer: Let's Encrypt: Every Server on the Internet Should Have a Certificate LXer Syndicated Linux News 0 08-25-2016 03:03 PM
crypt() perl function to encrypt Password in shell scripts or How Encrypt passwords ? balakrishnay Linux - General 13 01-14-2010 09:35 AM
encrypt and decrypt using encrypt(char block[64], int edflag) rockwell_001 Linux - Security 3 08-30-2009 09:16 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 01:52 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration