search

ebekker / ACMESharp

An ACME client library and PowerShell client for the .NET platform (Let's Encrypt)
https://pkisharp.github.io/ACMESharp-docs/
1.21k stars 184 forks source link

How to resolve challenge / identifier status "invalid" #332

Open alexhass opened 6 years ago

alexhass commented 6 years ago

I have two failues of requests and both are marked with status invalid. Both are resolved now by fixing the DNS and IIS redirect rules. However the status cannot set back to pending and I have no idea how to request the check from let enrypt again.

  1. I missed to add an IP to DNS for wildcard. Therefore lets encrypt reports "No valid IP address found for ...". So I fixed this in DNS and like to request again.
  2. I also had a conflicting rewrite rule that has not skipped .well-known path and therefore returned invalid content to lets encrypt server.

Both error are valid "invalid"'s, but now I fixed both of them and need to request again. How can I tell the lets encrypt API to check again???

Complete-ACMEChallenge : authorization is not in pending state; use Force flag to override this validation

Running this with -Force does also NOT reset the validation. This could be a bug, too.

WallyRanson commented 6 years ago

Once a challenge have changed to invalid that challenge is dead for good. You need to start over with a new identifier. Just a timestamp to the identifier, then it works everytime.