search

tobychui / zoraxy

A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!
https://zoraxy.aroz.org
GNU Affero General Public License v3.0
3.02k stars 182 forks source link

[HELP] Not possible to create an SSL certificate #386

Open daendaen opened 5 days ago

daendaen commented 5 days ago

Hi,

I’ve installed the latest version of Zoraxy as a Docker container, and the necessary ports are open.

Now, I wanted to secure my DNS address with an SSL certificate, but I keep getting the following error.

Error: one or more domains had a problem: [DOMAIN.ddns.net] acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: 99.999.99.99: Invalid response from http://DOMAIN.ddns.net/.well-known/acme-challenge/7k9pJWEaLAxLMDVBsUffVCDv1ykyckWNpfoBulj4fq8: 404

As a test, I set up the DNS address with SSL using Nginx, and that worked without any issues.

Does anyone have an idea what might be causing this?

Best regards,

xxLexanixx commented 3 days ago

i have the same issue

[mydomain.com] acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: 12.34.56.78: Invalid response from http://mydomain.com/.well-known/acme-challenge/ulhLOyyun5LCNDLDLtLA3nm0bnW7-LuVvFdqTdNaq1o: 404

Portforwarding for 80 and 443 is active i can create certificates at the nginx proxy manager without problems

tobychui commented 2 days ago

@yeungalan Can you help check if the latest version of Zoraxy ACME module got any issue regarding http-01 challenge?

Though, from what I observed, these issues mostly come from inbound network settings. In your case, I would recommend keep using NPM if it works in your specific network environment (and maybe use Zoraxy as a 2nd layer proxy). NPM is more compatible with de-facto or "wired" network setups as it is a much more mature and old project.