Hello,
I have problem to get an Let’s encrypt SSL cert for my virtual server / domain.
To explain everything, at first I had Webmin installed on a Debian 9 OS server standalone. I’ve set up two virtual domains, and thereafter I decided to install Virtualmin. I have read that it’s not a so good idea, but I did anyway. The installation finally was fine, and once I tried to add a SSL to my domains, it was working fine (I didn’t try before when it was only Webmin installed).
But thereafter, I modify too much things, and things bacame not working so good on my server, so I decided to reinstall a fresh new Debian 9 OS wiht LAMP and to install Virtualmin just after. Once it was finished, I’ve set up a virtual domain, but when I tried to add SSL with Let’s encrypt, it was not working… After many tries and modifications, as I found on the internet, to try to resolve the problem, I decided to reinstall - again - my OS, but this time to go with Ubuntu 16.04. But after the fresh new installation of the OS (alone, without LAMP or anything else) and Virtualmin, again, impossible to add a SSL with Let’s encrypt…
When I try to get a SSL cert from Let’s encrypt, I get this result:
Web-based validation failed : Failed to request certificate :
Parsing account key…
.
Parsing CSR…
Registering account…
Already registered!
Verifying domain.ltd…
Traceback (most recent call last):
File “/usr/share/webmin/webmin/acme_tiny.py”, line 235, in
main(sys.argv[1:])
File “/usr/share/webmin/webmin/acme_tiny.py”, line 231, in main
signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, args.dns_hook, args.cleanup_hook, log=LOGGER, CA=args.ca)
File “/usr/share/webmin/webmin/acme_tiny.py”, line 184, in get_crt
domain, challenge_status))
ValueError: domain.ltd challenge did not pass: {u’status’: u’invalid’, u’validationRecord’: [{u’addressesResolved’: [u’192.xxx.xxx.xxx’, u’2a01:c206:2012:8372::1’], u’url’: u’http://domain.ltd/.well-known/acme-challenge/RehRKM1t-Q9OsIwVs_bY8TLGEGD6EnPgVyFXtmeB8BA’, u’hostname’: u’domain.ltd’, u’addressesTried’: [], u’addressUsed’: u’2a01:c206:2012:8372::1’, u’port’: u’80’}], u’keyAuthorization’: u’RehRKM1t-Q9OsIwVs_bY8TLGEGD6EnPgVyFXtmeB8BA.VrFsd3bc5ajzHJ0zDGHhfz-1m2GHbdos5aemqdI-9L4’, u’uri’: u’https://acme-v01.api.letsencrypt.org/acme/challenge/0e2NMC1VdlzI-F_R64iB7Wuu9f1Q-Q6Kx2Xln6cG4UQ/2014175868’, u’token’: u’RehRKM1t-Q9OsIwVs_bY8TLGEGD6EnPgVyFXtmeB8BA’, u’error’: {u’status’: 403, u’type’: u’urn:acme:error:unauthorized’, u’detail’: u’Invalid response from http://domain.ltd/.well-known/acme-challenge/RehRKM1t-Q9OsIwVs_bY8TLGEGD6EnPgVyFXtmeB8BA: “\n\n404 Not Found\n\nNot Found
\n<p”’}, u’type’: u’http-01’}
And:
DNS-based validation failed : Failed to request certificate :
Parsing account key…
Parsing CSR…
Registering account…
Already registered!
Verifying domain.ltd…
Traceback (most recent call last):
File “/usr/share/webmin/webmin/acme_tiny.py”, line 235, in
main(sys.argv[1:])
File “/usr/share/webmin/webmin/acme_tiny.py”, line 231, in main
signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, args.dns_hook, args.cleanup_hook, log=LOGGER, CA=args.ca)
File “/usr/share/webmin/webmin/acme_tiny.py”, line 184, in get_crt
domain, challenge_status))
ValueError: domain.ltd challenge did not pass: {u’status’: u’invalid’, u’keyAuthorization’: u’eVMSDcBtiuG16ByC2NL8Kpn8KpyrhdbVq1ccHD9M-C0.VrFsd3bc5ajzHJ0zDGHhfz-1m2GHbdos5aemqdI-9L4’, u’uri’: u’https://acme-v01.api.letsencrypt.org/acme/challenge/NUYeNR73wl7gx00HA5ig6uf3C9_KgD4eLbgPEARDPdA/2014176131’, u’token’: u’eVMSDcBtiuG16ByC2NL8Kpn8KpyrhdbVq1ccHD9M-C0’, u’error’: {u’status’: 400, u’type’: u’urn:acme:error:connection’, u’detail’: u’DNS problem: NXDOMAIN looking up TXT for _acme-challenge.domain.ltd’}, u’type’: u’dns-01’}
So, I’ve tried a lot of “solutions” what I found on this site or elswhere on the net, but nothing was working…
Maybe someone is able to help me and to tell me what is wrong?..
Cheers