2

I'm trying to install LetsEncrypt for my domains on my Ubuntu server, I've done these before.. Now I'm on another server, and when I try to run ./letsencrypt-auto --apache -d example.com -d www.example.com, I receive this error:

Failed authorization procedure. www.domain.nl (tls-sni-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Incorrect validation certificate for TLS-SNI-01 challenge. Requested 24b12211dde2917738675c9e33fd8883.f67ae135c7fed3148764ebe4e009e44e.acme.invalid from 0.0.0.0:443. Received certificate containing '', leeshetetiket.nl (tls-sni-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Incorrect validation certificate for TLS-SNI-01 challenge. Requested b7f2fd7903dd65daf58239f7c00abf27.7995b788de04bee09ec907cbc36ff986.acme.invalid from 0.0.0.0:443. Received certificate containing ''

IMPORTANT NOTES: - The following errors were reported by the server:

Domain: www.domain.nl Type: unauthorized Detail: Incorrect validation certificate for TLS-SNI-01 challenge.
Requested
24b12211dde2917738675c9e33fd8883.f67ae135c7fed3148764ebe4e009e44e.acme.invalid from 0.0.0.0:443. Received certificate containing ''

Domain: domain.nl Type: unauthorized Detail: Incorrect validation certificate for TLS-SNI-01 challenge.
Requested
b7f2fd7903dd65daf58239f7c00abf27.7995b788de04bee09ec907cbc36ff986.acme.invalid from 0.0.0.0:443. Received certificate containing ''

To fix these errors, please make sure that your domain name was
entered correctly and the DNS A record(s) for that domain
contain(s) the right IP address.

My domain contains the A record(s) pointing to the server, since I'm already managing the domain on the server.

Improve this question

2 Answers 2

Reset to default
1

Did you just set up nameservers/added A records? I know I had the exact same problem and I just had to wait for the DNS to propagate.

Improve this answer
7
  • I see, well I've did it like 12 hours ago.. thought it'd work by now.
    – peer
    Jun 23, 2016 at 8:58
  • If you have more than 1 SSL on that server, I think you need to specify the webroot parameter and agree to the TOS, --agree-tos -a webroot --webroot-path=/home/user/public_html.
    – Mugurel
    Jun 23, 2016 at 9:01
  • Hmm, I do not have more than 1 SSL on the server atm.. But I'll try that
    – peer
    Jun 23, 2016 at 9:10
  • I've got it working now.. well atleast I've installed the certificate.. But now Chrome is telling me "connection is not secure".
    – peer
    Jun 23, 2016 at 9:19
  • Can you please attach a screenshot?
    – Mugurel
    Jun 23, 2016 at 9:44
0

I found the Let's Encrypt client unreliable, I used ACME. I have a [tutorial available here] for Amazon Linux, but Ubuntu should be much the same2.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.