win-acme: Authorization Result: invalid
I’m unable to get an authorization. I checked file C:\inetpub\wwwroot.well-known/acme-challenge/71xO9oqLyv2rmopvZQceLBXURtg8m7PKe1iCpcyVvOU is present and http://wsus.ivsweb.com/.well-known/acme-chall enge/71xO9oqLyv2rmopvZQceLBXURtg8m7PKe1iCpcyVvOU is reachable
I also execute the 3 steps detailled bellow to get StaticFile above ExtensionlessUrlHandler.
Thank you for your help
Let's Encrypt (Simple Windows ACME Client)
Renewal Period: 60
Certificate Store: WebHosting
ACME Server: https://acme-v01.api.letsencrypt.org/
Config Folder: C:\Users\aellert\AppData\Roaming\letsencrypt-win-simple\httpsacme
-v01.api.letsencrypt.org
Certificate Folder: C:\Users\aellert\AppData\Roaming\letsencrypt-win-simple\http
sacme-v01.api.letsencrypt.org
Loading Signer from C:\Users\aellert\AppData\Roaming\letsencrypt-win-simple\http
sacme-v01.api.letsencrypt.org\Signer
Getting AcmeServerDirectory
Loading Registration from C:\Users\aellert\AppData\Roaming\letsencrypt-win-simpl
e\httpsacme-v01.api.letsencrypt.org\Registration
Scanning IIS Site Bindings for Hosts
1: IIS wsus.ivsweb.com (%SystemDrive%\inetpub\wwwroot)
W: Generate a certificate via WebDav and install it manually.
F: Generate a certificate via FTP/ FTPS and install it manually.
M: Generate a certificate manually.
A: Get certificates for all hosts
Q: Quit
Which host do you want to get a certificate for: 1
Authorizing Identifier wsus.ivsweb.com Using Challenge Type http-01
Writing challenge answer to C:\inetpub\wwwroot\.well-known/acme-challenge/71xO9
oqLyv2rmopvZQceLBXURtg8m7PKe1iCpcyVvOU
Writing web.config to add extensionless mime type to C:\inetpub\wwwroot\.well-k
nown\acme-challenge\web.config
Answer should now be browsable at http://wsus.ivsweb.com/.well-known/acme-chall
enge/71xO9oqLyv2rmopvZQceLBXURtg8m7PKe1iCpcyVvOU
Submitting answer
Refreshing authorization
Authorization Result: invalid
******************************************************************************
The ACME server was probably unable to reach http://wsus.ivsweb.com/.well-known/
acme-challenge/71xO9oqLyv2rmopvZQceLBXURtg8m7PKe1iCpcyVvOU
Check in a browser to see if the answer file is being served correctly.
This could be caused by IIS not being setup to handle extensionless static
files. Here's how to fix that:
1. In IIS manager goto Site/Server->Handler Mappings->View Ordered List
2. Move the StaticFile mapping above the ExtensionlessUrlHandler mappings.
(like this http://i.stack.imgur.com/nkvrL.png)
3. If you need to make changes to your web.config file, update the one
at C:\letsencrypt-win-simple\web_config.xml
******************************************************************************
Press enter to continue.
About this issue
- Original URL
- State: closed
- Created 7 years ago
- Comments: 16 (3 by maintainers)
facing this issue, please suggest a resolution: is it required that the site should be accessible over internet to proceed with below step without error?