Challenge validation failed #421

New Issue

2025-12-29T01:24:53+01:00

adam commented

2025-12-29 01:24:53 +01:00

Originally created by @KyferEz on GitHub (Jul 19, 2019).

Challenge validation is occurring on port 80 which my server does not listen on. How can I get the URL to be HTTPS for the validation?

See the relevant sections in below full error where is says Fetching HTTP... and lower on PORT 80.

 + Challenge validation has failed :(
ERROR: Challenge is invalid! (returned: invalid) (result: {
  "type": "http-01",
  "status": "invalid",
  "error": {
    "type": "urn:acme:error:connection",
    "detail": "Fetching http://mydomain.hopto.org/.well-known/acme-challenge/cnIJifPA7EHQPCBBuhUoxxxxpJLxcUChlP6RvR_Udwg: Timeout during connect (likely firewall problem)",
    "status": 400
  },
  "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/u4EBhGAy-AwER19ZbOxxxxhwiqdfmLJbxz1bsE4dEBg/331778724",
  "token": "cnIJifPA7EHQPCBBuhUoxxxxpJLxcUChlP6RvR_Udwg",
  "validationRecord": [
    {
      "url": "http://mydomain.hopto.org/.well-known/acme-challenge/cnIJifPA7EHQPCBBuhUoxxxxpJLxcUChlP6RvR_Udwg",
      "hostname": "mydomain.hopto.org",
      "port": "80",
      "addressesResolved": [
        "7x.xx.xx.xxx"
      ],
      "addressUsed": "7x.xx.xx.xxx"
    }
  ]
})

Originally created by @KyferEz on GitHub (Jul 19, 2019). Challenge validation is occurring on port 80 which my server does not listen on. How can I get the URL to be HTTPS for the validation? See the relevant sections in below full error where is says Fetching HTTP... and lower on PORT 80. ``` + Challenge validation has failed :( ERROR: Challenge is invalid! (returned: invalid) (result: { "type": "http-01", "status": "invalid", "error": { "type": "urn:acme:error:connection", "detail": "Fetching http://mydomain.hopto.org/.well-known/acme-challenge/cnIJifPA7EHQPCBBuhUoxxxxpJLxcUChlP6RvR_Udwg: Timeout during connect (likely firewall problem)", "status": 400 }, "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/u4EBhGAy-AwER19ZbOxxxxhwiqdfmLJbxz1bsE4dEBg/331778724", "token": "cnIJifPA7EHQPCBBuhUoxxxxpJLxcUChlP6RvR_Udwg", "validationRecord": [ { "url": "http://mydomain.hopto.org/.well-known/acme-challenge/cnIJifPA7EHQPCBBuhUoxxxxpJLxcUChlP6RvR_Udwg", "hostname": "mydomain.hopto.org", "port": "80", "addressesResolved": [ "7x.xx.xx.xxx" ], "addressUsed": "7x.xx.xx.xxx" } ] }) ```

adam closed this issue

2025-12-29 01:24:54 +01:00

adam commented

2025-12-29 01:24:55 +01:00

@lukas2511 commented on GitHub (Jul 20, 2019):

http-01 verification will always use port 80. if you need verification over port 443 you'll have to use tls-alpn verification, which is a bit more complicated. see the docs for more information.

@lukas2511 commented on GitHub (Jul 20, 2019): http-01 verification will always use port 80. if you need verification over port 443 you'll have to use tls-alpn verification, which is a bit more complicated. see the docs for more information.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/dehydrated#421