Error: Let's Encrypt validation status 400

[Caleb Watson]

On CentOS with the same issue, a simple reinstall of the Vesta worked just fine for me.

[youradds]

For me, because it was a server move - I actually had to do a restore of the user from a backup file, and then it worked fine. I guess it doesn't like you creating a new profile and a new SSL cert.

Cheers

Andy

[zooks]

This error caused by wrong domains list. IP settings added it automatically with no new line.

Code: Select all

domain.comdomain.com

[geek]

I still have the same problem. Re-installed VESTACP as admin suggested but did not work.

[youradds]

What does your error logs for the domain say? You should see a request in the domains /logs/ file (depending on your setup, it will be access.log or error.log). If you see something about the /.well-known then it may give an idea. The quickest way is to just grep for it:

Code: Select all

cd /home/user/web/domains.com/logs
grep -r '/.well-known' .

...and see if it gives any hints.

Cheers

Andy

[mlopez]

Hey,

Am facing some similar issues. Am using vesta with nginx + php-fpm (Centos 7) and am adding the domain in vesta and when i try to generate the letsencrypt ssl it fails.
I removed the www alias and then it works - but it's really important the ssl to cover the www alias as well

Do you have any ideas why this might happen? All steps taken are from vesta interface panel

For DNS provider am using Stackpath so am not facing the Cloudflare crypto issues - a month ago i added a domain with www and it worked fine now it seems something is off with vesta or letsencrypt

Looking forward

Thank you, desolator!! You saved me!

[websystems]

Debian 9, fresh setup.

Same issue (Error 400) here when trying to add cert for domain that I have just added to the control panel

Altought SSH: v-add-letsencrypt-domain USERNAME DOMAIN created a certificate and enabled SSL in a couple of seconds. Looks like a bug.

[alg]

Hello,

- Upgrade v-add-letsencrypt-domain with the last version

- delete the olds letsencrypt nginx or apache files in you config
/home/user/web/nginx.mydomain.com.conf_letsencrypt
/home/user/web/snginx.mydomain.com.conf_letsencrypt

- execute the bash script :
v-add-letsencrypt-domain user mydomain.com

Works like a charm for me.

Regards

[SanTi]

I have solved problem. This mproblem may caused several reasons but my problem was so so sooo basic. I fell stupid. Lets encrypt try to access to

Code: Select all

http://<YOUR_DOMAIN>/.well-known/acme-challenge/<TOKEN>

but I used this line at 80 port nginx conf to force https.

Code: Select all

return 301 https://domain.com$request_uri;

so letsenrytpt could not access to that url (http://<YOUR_DOMAIN>/.well-known/acme-challenge/<TOKEN>). I and it is failed. I commented return 301 line then renew certiface without any problem. You can try this also.

From

Code: Select all

return 301 https://domain.com$request_uri;

to

Code: Select all

#return 301 https://domain.com$request_uri;

and renew certificate.

[shahalom]

I found this video tutorial usefule. https://www.youtube.com/watch?v=T29GPpLbvvs