1

I've got a LetsEncrypt Certificate working on Ubuntu Server in a LXD setup with a jumpbox.

The renewal isn't working, the verification files are not accessible

Attempting to renew cert (example.com) from /etc/letsencrypt/renewal/example.com.conf produced an unexpected error: Failed authorization procedure. example.com (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response 

 Domain: example.com/
   Type:   unauthorized
   Detail: Invalid response from
   http://example.com/.well-known/acme-challenge/2IvN-H2-iqCBl7IZ1Wh8KSbcAia1uLGVmPT2bDZ9sqc:
   "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
   <html><head>
   <title>404 Not Found</title>
   </head><body>
   <h1>Not Found</h1>
   <p"

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

Here is my haproxy config

frontend app_ssl
    bind *:443 ssl crt /etc/haproxy/certs/api.showhow.nz.pem
    reqadd X-Forwarded-Proto:\ https
    acl letsencrypt-acl path_beg /.well-known/acme-challenge/
    use_backend letsencrypt-backend if letsencrypt-acl
    default_backend web2

backend letsencrypt-backend
   server letsencrypt 127.0.0.1:54321

Any idea where I'm going wrong?

0

I had to set up

acl letsencrypt-acl path_beg /.well-known/acme-challenge/
use_backend letsencrypt-backend if letsencrypt-acl

On the non-ssl front end

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.