Let's Encrypt verification failed with alternative names

Issue #902 resolved
Adhidarma Hadiwinoto created an issue

If I put only on common name, LE passed verification successfully.

But if I put additional hostname on alternative names, it failed. I can confirm DNS has point to right address. I can open the token from my web browser.

Here is the logs:

[2021-10-30 04:10:23] LEScript.INFO: Getting list of URLs for API
[2021-10-30 04:10:24] LEScript.INFO: Requesting new nonce for client communication
[2021-10-30 04:10:25] LEScript.INFO: Account already registered. Continuing.
[2021-10-30 04:10:25] LEScript.INFO: Sending registration to letsencrypt server
[2021-10-30 04:10:25] LEScript.INFO: Sending signed request to https://acme-v02.api.letsencrypt.org/acme/new-acct
[2021-10-30 04:10:25] LEScript.INFO: Account: https://acme-v02.api.letsencrypt.org/acme/acct/260301110
[2021-10-30 04:10:25] LEScript.INFO: Starting certificate generation process for domains
[2021-10-30 04:10:25] LEScript.INFO: Requesting challenge for chopin.host2host.id, mail.kodesumber.com, webmail.kodesumber.com
[2021-10-30 04:10:25] LEScript.INFO: Sending signed request to https://acme-v02.api.letsencrypt.org/acme/new-order
[2021-10-30 04:10:26] LEScript.INFO: Sending signed request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/44424360910
[2021-10-30 04:10:27] LEScript.INFO: Got challenge token for chopin.host2host.id
[2021-10-30 04:10:27] LEScript.INFO: Token for chopin.host2host.id saved at /opt/www//.well-known/acme-challenge/wYaYplWEUav0T7UbnB-MCZP3-HnBctUn4A36ZKGKfyk and should be available at http://chopin.host2host.id/.well-known/acme-challenge/wYaYplWEUav0T7UbnB-MCZP3-HnBctUn4A36ZKGKfyk
[2021-10-30 04:10:27] LEScript.INFO: Sending request to challenge
[2021-10-30 04:10:27] LEScript.INFO: Sending signed request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/44424360910/LMREFA
[2021-10-30 04:10:28] LEScript.INFO: Verification ended with status: valid
[2021-10-30 04:10:28] LEScript.INFO: Sending signed request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/44446814080
[2021-10-30 04:10:28] LEScript.INFO: Got challenge token for mail.kodesumber.com
[2021-10-30 04:10:28] LEScript.INFO: Token for mail.kodesumber.com saved at /opt/www//.well-known/acme-challenge/s98ECCM8uUvpwPVOFva-93twXgFT8g_N13-lmX9jiVI and should be available at http://mail.kodesumber.com/.well-known/acme-challenge/s98ECCM8uUvpwPVOFva-93twXgFT8g_N13-lmX9jiVI
[2021-10-30 04:11:28] LEScript.ERROR: Please check http://mail.kodesumber.com/.well-known/acme-challenge/s98ECCM8uUvpwPVOFva-93twXgFT8g_N13-lmX9jiVI - token not available
[2021-10-30 04:11:28] LEScript.ERROR: #0 /opt/admin/src/Base/Handler/LeHandler.php(62): Analogic\ACME\Lescript->signDomains(Array)
[2021-10-30 04:11:28] LEScript.ERROR: #1 /opt/admin/src/Base/Controller/LeController.php(71): App\Base\Handler\LeHandler->renew(true)
[2021-10-30 04:11:28] LEScript.ERROR: #2 /opt/admin/vendor/symfony/http-kernel/HttpKernel.php(158): App\Base\Controller\LeController->issueAction(Object(Symfony\Component\HttpFoundation\Request))
[2021-10-30 04:11:28] LEScript.ERROR: #3 /opt/admin/vendor/symfony/http-kernel/HttpKernel.php(80): Symfony\Component\HttpKernel\HttpKernel->handleRaw(Object(Symfony\Component\HttpFoundation\Request), 1)
[2021-10-30 04:11:28] LEScript.ERROR: #4 /opt/admin/vendor/symfony/http-kernel/Kernel.php(201): Symfony\Component\HttpKernel\HttpKernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true)
[2021-10-30 04:11:28] LEScript.ERROR: #5 /opt/admin/public/index.php(28): Symfony\Component\HttpKernel\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request))
[2021-10-30 04:11:28] LEScript.ERROR: #6 {main}

Comments (2)

  1. Adhidarma Hadiwinoto reporter

    Found the problem. It caused by my server is behind a NAT so LEScript can not reach itself. Fixed by add some host overrides on /etc/hosts.

  2. Log in to comment