Ошибка генерации сертификата.

[oleg_ma]

Ошибка генерации сертификата. Серверный хостнейм должен быть привязан к айпи сервера!
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for site.site
Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems:
Domain: site.site
Type: unauthorized
Detail: xx.xx.xx.xx: Invalid response from http://site.site/.well-known/acme-chall ... FhF5tRL54w: 403

Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.


dig @1.1.1.1 site.site A

; <<>> DiG 9.11.3-1ubuntu1.18-Ubuntu <<>> @1.1.1.1 site.site A
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8651
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;h1.wilda.ru. IN A

;; ANSWER SECTION:
site.site. 3600 IN A xx.xx.xx.xx

;; Query time: 116 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Tue Apr 22 06:07:09 UTC 2025
;; MSG SIZE rcvd: 56
A

Помогите пожалуйста разобраться. Не хочет сертификат генерироваться для панели. По dns записям все ок, права на папку даже 777 дал, толку ноль.

Invalid response from http://site.site/.well-known/acme-challenge/...: 403


Связка apache+nginx+nodejs+django

[oleg_ma]

через certbot --nginx -d site.site генерируется нормально

[oleg_ma]

до установил плагин python3-certbot-nginx и заработало

[sbury]

покажите вывод команд

Код: Выделить всё

cat /etc/os-release
dpkg -l | grep cert

[oleg_ma]

Починил уже. Спасибо.

Код: Выделить всё

PRETTY_NAME="Ubuntu 22.04.5 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.5 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy


ii  ca-certificates                    20240203~22.04.1                        all          Common CA certificates
ii  certbot                            1.21.0-1build1                          all          automatically configure HTTPS using Let's Encrypt
ii  dirmngr                            2.2.27-3ubuntu2.3                       amd64        GNU privacy guard - network certificate management service
ii  python3-certbot                    1.21.0-1build1                          all          main library for certbot
ii  python3-certbot-dns-cloudflare     1.18.0-1                                all          Cloudflare DNS plugin for Certbot
ii  python3-certbot-nginx              1.21.0-1                                all          Nginx plugin for Certbot
ii  python3-certifi                    2020.6.20-1                             all          root certificates for validating SSL certs and verifying TLS hosts (python3)
ii  sscg                               3.0.2-10                                amd64        simple SSL certificate generator
ii  ssl-cert                           1.1.2                                   all          simple debconf wrapper for OpenSSL

[sbury]

можете еще показать вывод

Код: Выделить всё

dpkg -l | grep nginx

[oleg_ma]

Код: Выделить всё

ii  brainy-nginx                       2:1.26.2-3brainy3                       all          Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and
ii  brainy-nginx-all-modules           2:1.26.2-3brainy3                       all          A meta package that installs all available Nginx modules.
ii  brainy-nginx-filesystem            2:1.26.2-3brainy3                       all          The nginx-filesystem package contains the basic directory layout
ii  brainy-nginx-mod-http-geoip        2:1.26.2-3brainy3                       all          Nginx HTTP geoip module.
ii  brainy-nginx-mod-http-image-filter 2:1.26.2-3brainy3                       all          Nginx HTTP image filter module.
ii  brainy-nginx-mod-http-perl         2:1.26.2-3brainy3                       all          Nginx HTTP perl module.
ii  brainy-nginx-mod-http-xslt-filter  2:1.26.2-3brainy3                       all          Nginx XSLT module.
ii  brainy-nginx-mod-mail              2:1.26.2-3brainy3                       all          Nginx mail modules.
ii  brainy-nginx-mod-pagespeed         2:1.26.2-3brainy3                       all          Nginx HTTP pagespeed module.
ii  brainy-nginx-mod-stream            2:1.26.2-3brainy3                       all          Nginx stream modules.
ii  nginx                              1:1.27.1-1brainy0.22.04                 all          Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and
ii  nginx-all-modules                  1:1.27.1-1brainy0.22.04                 all          A meta package that installs all available Nginx modules.
ii  nginx-filesystem                   1:1.27.1-1brainy0.22.04                 all          The nginx-filesystem package contains the basic directory layout
ii  nginx-mod-http-brotli              1:1.27.1-1brainy0.22.04                 all          Nginx HTTP brotli module.
ii  nginx-mod-http-cache-purge         1:1.27.1-1brainy0.22.04                 all          Nginx HTTP cache purge module.
ii  nginx-mod-http-geoip               1:1.27.1-1brainy0.22.04                 all          Nginx HTTP geoip module.
ii  nginx-mod-http-headers-more-filter 1:1.27.1-1brainy0.22.04                 all          Nginx HTTP headers filter module.
ii  nginx-mod-http-image-filter        1:1.27.1-1brainy0.22.04                 all          Nginx HTTP image filter module.
ii  nginx-mod-http-modsecurity         1:1.27.1-1brainy0.22.04                 all          Nginx HTTP pagespeed module.
ii  nginx-mod-http-perl                1:1.27.1-1brainy0.22.04                 all          Nginx HTTP perl module.
ii  nginx-mod-http-xslt-filter         1:1.27.1-1brainy0.22.04                 all          Nginx XSLT module.
ii  nginx-mod-mail                     1:1.27.1-1brainy0.22.04                 all          Nginx mail modules.
ii  nginx-mod-pagespeed                1:1.27.1-1brainy0.22.04                 all          Nginx HTTP pagespeed module.
ii  nginx-mod-stream                   1:1.27.1-1brainy0.22.04                 all          Nginx stream modules.
ii  python3-certbot-nginx              1.21.0-1                                all          Nginx plugin for Certbot