Differences

This shows you the differences between two versions of the page.

--- wiki:certbot_troubleshooting [2021/07/13 09:25] – add SEC_ERROR_UNKNOWN_ISSUER antisa
+++ wiki:certbot_troubleshooting [2024/06/12 08:29] (current) – [References] add https://letsencrypt.org/docs/ipv6-support/ antisa
@@ Line 2: / Line 2: @@
 ====== Letsencrypt certbot troubleshooting ======
-  * certbot first establishes connection over ipv6. If you are getting timeout errors check firewall for ipv6 https access or set network stack to prefer ipv4 over ipv6
+  * certbot first establishes connection over ipv6. If you are getting timeout errors check firewall for ipv6 https access or set network stack to [[wiki:ipv4_over_ipv6|prefer ipv4 over ipv6]]. Also remove the AAAA record for your domain if you don't want it to connect over IPv6.
   * Make sure that you can access a file path under webserver root as certbot uses .well-acme folder inside it to fetch the token it uses to check the owner of domain/server
@@ Line 9: / Line 9: @@
   * Certbot only works on default ports, 80 and 443. Check if the Listen directive has a different port if you get "Unauthorized error.
+  * When using the [[https://docs.ansible.com/ansible/latest/collections/community/crypto/acme_certificate_module.html#examples|ansible module]] make sure you add a [[https://github.com/ansible-collections/community.crypto/pull/11/files|check]] for the //challenge_data// this part:
+  when: sample_com_challenge is changed and 'sample.com' in sample_com_challenge['challenge_data']
+otherwise the step will fail with this error
+<code>
+TASK [letsencrypt : Implement http-01 challenge files] ***********************************************************************************************************
+fatal: [1.1.1.1]: FAILED! =>
+  msg: |-
+    The task includes an option with an undefined variable. The error was: 'dict object' has no attribute 'my.domain.com'
+</code>
 ===== Failed authorization procedure.... =====
@@ Line 37: / Line 51: @@
   * [[wiki:certbot_download_certificates_only|Certbot download certificates only]]
 ====== References ======
+  * https://github.com/ansible/ansible/issues/67949
+  * https://letsencrypt.org/docs/ipv6-support/