I am trying to requesting a certificate for my domain exampledomain.com using Let's Encrypt.
exampledomain.com is virtualserver other subdomains are only aliases with no email.
domain: exampledomain.com www.exampledomain.com
It is weird but then I was using OVH for DNS everything was ok, after moving DNS to Amazon Route53 I have problems.
Interesting is that I have other domain on Amazon Route52 and there is no problem there.
Domain > server configuration> Manage SSL Certificate and I select domains and I have error:
Requesting a certificate for exampledomain.com, www.exampledomain.com, mail.exampledomain.com, www.mail.exampledomain.com, dl.exampledomain.com, www.dl.exampledomain.com from Let's Encrypt .. .. request failed : Web-based validation failed : Failed to request certificate : www.exampledomain.com challenge did not pass: Invalid response from http://www.exampledomain.com/.well-known/acme-challenge/25kxZh6xxxxxxxxx... "\r\n404 Not Found\r\n\r\n404 Not Found
" DNS-based validation failed : Failed to request certificate : Gave up waiting for validation
Whan I have check: I have check permissions I have created a test.txt http://www.exampledomain.com/.well-known/acme-challenge/test.txt Access from browser is ok.
I have test only exampledomain.com the same error.
I have txt in DNS entry added, but maybe it is wrong. In DNS records there was only
_acme-challenge.www there was no _acme-challenge
I am using DNS from Amazon Route53.
How can I check the correct values for _acme-challenge and _acme-challenge.www?
I was doing updates of virtualmin and webmin, but I don't know when the problem start. I know only when I was using OVH DNS there was OK. I was moving the VPS in April 2018 to new DC and in August I was adding and configuring new domain.
What is different that I use geoDNS and I have 4VPS and I have a problem only with one EU VPS and one domain. I have the similar config with other domain and I have no problem there.
Webmin version 1.893 Usermin version 1.741 Virtualmin version 6.04
May you help? For me this is weird either Web-based validation failed or DNS-based validation failed should works.