{"action":"created","issue":{"url":"https://api.github.com/repos/webmin/webmin/issues/975","repository_url":"https://api.github.com/repos/webmin/webmin","labels_url":"https://api.github.com/repos/webmin/webmin/issues/975/labels{/name}","comments_url":"https://api.github.com/repos/webmin/webmin/issues/975/comments","events_url":"https://api.github.com/repos/webmin/webmin/issues/975/events","html_url":"https://github.com/webmin/webmin/issues/975","id":371936961,"node_id":"MDU6SXNzdWUzNzE5MzY5NjE=","number":975,"title":"Let's Encrypt Web-based validation failed and DNS-based validation failed ","user":{"login":"adamus007pp","id":39069249,"node_id":"MDQ6VXNlcjM5MDY5MjQ5","avatar_url":"https://avatars2.githubusercontent.com/u/39069249?v=4","gravatar_id":"","url":"https://api.github.com/users/adamus007pp","html_url":"https://github.com/adamus007pp","followers_url":"https://api.github.com/users/adamus007pp/followers","following_url":"https://api.github.com/users/adamus007pp/following{/other_user}","gists_url":"https://api.github.com/users/adamus007pp/gists{/gist_id}","starred_url":"https://api.github.com/users/adamus007pp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adamus007pp/subscriptions","organizations_url":"https://api.github.com/users/adamus007pp/orgs","repos_url":"https://api.github.com/users/adamus007pp/repos","events_url":"https://api.github.com/users/adamus007pp/events{/privacy}","received_events_url":"https://api.github.com/users/adamus007pp/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-10-19T12:29:51Z","updated_at":"2018-10-20T01:09:51Z","closed_at":null,"author_association":"NONE","body":"Hello,\r\n\r\nI am trying to requesting a certificate for my domain exampledomain.com using Let's Encrypt.\r\n\r\nexampledomain.com is virtualserver other subdomains are only aliases with no email.\r\n\r\ndomain:\r\nexampledomain.com\r\nwww.exampledomain.com\r\n\r\naliases:\r\nmail.exampledomain.com\r\nwww.mail.exampledomain.com\r\ndl.exampledomain.com\r\nwww.dl.exampledomain.com\r\n\r\n\r\nIt is weird but then I was using OVH for DNS everything was ok, after moving DNS to Amazon Route53 I have problems.\r\n\r\nInteresting is that I have other domain on Amazon Route52 and there is no problem there.\r\n\r\n\r\nDomain > server configuration> Manage SSL Certificate and I select domains and I have error:\r\n\r\nRequesting a certificate for exampledomain.com, www.exampledomain.com, mail.exampledomain.com, www.mail.exampledomain.com, dl.exampledomain.com, www.dl.exampledomain.com from Let's Encrypt ..\r\n.. request failed : Web-based validation failed : Failed to request certificate :\r\nwww.exampledomain.com challenge did not pass: Invalid response from http://www.exampledomain.com/.well-known/acme-challenge/25kxZh6xxxxxxxxxxxxxxxx5QWN-R_vzwWq1Ko: \"<html>\\r\\n<head><title>404 Not Found</title></head>\\r\\n<body bgcolor=\\\"white\\\">\\r\\n<center><h1>404 Not Found</h1></center>\\r\\n<hr><center>\"\r\nDNS-based validation failed : Failed to request certificate :\r\nGave up waiting for validation\r\n\r\n\r\n\r\n\r\nWhan I have check:\r\nI have check permissions\r\nI have created a test.txt\r\nhttp://www.exampledomain.com/.well-known/acme-challenge/test.txt\r\nAccess from browser is ok.\r\n\r\n\r\nI have test only exampledomain.com the same error.\r\n\r\nI have txt in DNS entry added, but maybe it is wrong.\r\nIn DNS records there was only\r\n\r\n_acme-challenge.www \r\nthere was no _acme-challenge\r\n\r\nI am using DNS from Amazon Route53.\r\n\r\nHow can I check the correct values for \r\n_acme-challenge and _acme-challenge.www?\r\n\r\n\r\n\r\nI was doing updates of virtualmin and webmin, but I don't know when the problem start.\r\nI know only when I was using OVH DNS there was OK.\r\nI was moving the VPS in April 2018 to new DC and in August I was adding and configuring new domain.\r\n\r\nWhat is different that I use geoDNS and I have 4VPS and I have a problem only with one EU VPS and one domain.\r\nI have the similar config with other domain and I have no problem there.\r\n\r\nWebmin version 1.893 \r\nUsermin version 1.741\r\nVirtualmin version 6.04\r\n\r\nMay you help? For me this is weird either Web-based validation failed or DNS-based validation failed should works.\r\n\r\n1. How to check the correct TXT values for _acme-challenge and _acme-challenge.www?\r\nvia GUI or command line\r\n2. How to generate via command SSL for domain using Let's Encrypt?\r\n"},"comment":{"url":"https://api.github.com/repos/webmin/webmin/issues/comments/431536395","html_url":"https://github.com/webmin/webmin/issues/975#issuecomment-431536395","issue_url":"https://api.github.com/repos/webmin/webmin/issues/975","id":431536395,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMTUzNjM5NQ==","user":{"login":"adamus007pp","id":39069249,"node_id":"MDQ6VXNlcjM5MDY5MjQ5","avatar_url":"https://avatars2.githubusercontent.com/u/39069249?v=4","gravatar_id":"","url":"https://api.github.com/users/adamus007pp","html_url":"https://github.com/adamus007pp","followers_url":"https://api.github.com/users/adamus007pp/followers","following_url":"https://api.github.com/users/adamus007pp/following{/other_user}","gists_url":"https://api.github.com/users/adamus007pp/gists{/gist_id}","starred_url":"https://api.github.com/users/adamus007pp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adamus007pp/subscriptions","organizations_url":"https://api.github.com/users/adamus007pp/orgs","repos_url":"https://api.github.com/users/adamus007pp/repos","events_url":"https://api.github.com/users/adamus007pp/events{/privacy}","received_events_url":"https://api.github.com/users/adamus007pp/received_events","type":"User","site_admin":false},"created_at":"2018-10-20T01:09:51Z","updated_at":"2018-10-20T01:09:51Z","author_association":"NONE","body":"I have made dig,\r\nns-1658.awsdns-15.co.uk. < this is one of my NS\r\n\r\nroot@host1:~# dig NS domainA.com ns-1658.awsdns-15.co.uk.\r\n\r\n; <<>> DiG 9.10.3-P4-Debian <<>> NS domainA.com ns-1658.awsdns-15.co.uk.\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39144\r\n;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1\r\n\r\n;; OPT PSEUDOSECTION:\r\n; EDNS: version: 0, flags:; udp: 4096\r\n;; QUESTION SECTION:\r\n;domainA.com.              IN      NS\r\n\r\n;; ANSWER SECTION:\r\ndomainA.com.       38400   IN      NS      host1.domainB.com.\r\n\r\n;; Query time: 0 msec\r\n;; SERVER: 127.0.0.1#53(127.0.0.1)\r\n;; WHEN: Sat Oct 20 03:05:55 CEST 2018\r\n;; MSG SIZE  rcvd: 78\r\n\r\n;; Got answer:\r\n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32196\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\r\n\r\n;; OPT PSEUDOSECTION:\r\n; EDNS: version: 0, flags:; udp: 4096\r\n;; QUESTION SECTION:\r\n;ns-1658.awsdns-15.co.uk.       IN      NS\r\n\r\n;; AUTHORITY SECTION:\r\nawsdns-15.co.uk.        696     IN      SOA     g-ns-335.awsdns-15.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400\r\n\r\n;; Query time: 0 msec\r\n;; SERVER: 127.0.0.1#53(127.0.0.1)\r\n;; WHEN: Sat Oct 20 03:05:55 CEST 2018\r\n;; MSG SIZE  rcvd: 125\r\n\r\nroot@host1:~#\r\nroot@host1:~#\r\nroot@host1:~#\r\nroot@host1:~#\r\nroot@host1:~# dig NS domainB.com ns-1658.awsdns-15.co.uk.\r\n\r\n; <<>> DiG 9.10.3-P4-Debian <<>> NS domainB.com ns-1658.awsdns-15.co.uk.\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 64106\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1\r\n\r\n;; OPT PSEUDOSECTION:\r\n; EDNS: version: 0, flags:; udp: 4096\r\n;; QUESTION SECTION:\r\n;domainB.com.              IN      NS\r\n\r\n;; Query time: 0 msec\r\n;; SERVER: 127.0.0.1#53(127.0.0.1)\r\n;; WHEN: Sat Oct 20 03:06:01 CEST 2018\r\n;; MSG SIZE  rcvd: 45\r\n\r\n;; Got answer:\r\n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63806\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\r\n\r\n;; OPT PSEUDOSECTION:\r\n; EDNS: version: 0, flags:; udp: 4096\r\n;; QUESTION SECTION:\r\n;ns-1658.awsdns-15.co.uk.       IN      NS\r\n\r\n;; AUTHORITY SECTION:\r\nawsdns-15.co.uk.        690     IN      SOA     g-ns-335.awsdns-15.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400\r\n\r\n;; Query time: 1 msec\r\n;; SERVER: 127.0.0.1#53(127.0.0.1)\r\n;; WHEN: Sat Oct 20 03:06:01 CEST 2018\r\n;; MSG SIZE  rcvd: 125\r\n"}}
{"actor":{"display_login":"adamus007pp"}}