Error getting validation data

Test works but I get an error when requesting certificate.

Here is the log:

I can’t post more then 5 links so I changed the domain

2020-09-09 13:59:05.585 +00:00 [INF] All Tests Completed OK
2020-09-09 14:03:59.429 +00:00 [INF] All Tests Completed OK
2020-09-09 14:04:05.185 +00:00 [INF] ---- Beginning Request [Default Web Site] ----
2020-09-09 14:04:05.185 +00:00 [INF] Certify/5.1.5.0 (Windows; Microsoft Windows NT 10.0.17763.0)
2020-09-09 14:04:05.199 +00:00 [INF] Beginning Certificate Request Process: Default Web Site using ACME Provider:Certes
2020-09-09 14:04:05.199 +00:00 [INF] Requested domains to include on certificate: secure.verkvest.is
2020-09-09 14:04:05.200 +00:00 [INF] Beginning certificate order for requested domains
2020-09-09 14:04:05.200 +00:00 [INF] BeginCertificateOrder: creating/retrieving order. Retries remaining:2
2020-09-09 14:04:06.348 +00:00 [ERR] Certes.AcmeRequestException: Fail to load resource from ‘https://acme-v02.api.letsencrypt.org/acme/new-order’.
urn:ietf:params:acme:error:badNonce: JWS has an invalid anti-replay nonce: “0102-vAznt7BI2CUR3nVTXNmBMAU_JspgSG22FJ2u4SsCMY”
at Certes.Acme.IAcmeHttpClientExtensions.d__0`1.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Certes.AcmeContext.d__19.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Certify.Providers.ACME.Certes.CertesACMEProvider.d__30.MoveNext() in C:\Work\GIT\certify_dev\certify\src\Certify.Providers\ACME\Certes\CertesACMEProvider.cs:line 567
2020-09-09 14:04:06.348 +00:00 [ERR] BeginCertificateOrder: error creating order. Retries remaining:1 :: JWS has an invalid anti-replay nonce: “0102-vAznt7BI2CUR3nVTXNmBMAU_JspgSG22FJ2u4SsCMY”
2020-09-09 14:04:07.350 +00:00 [INF] BeginCertificateOrder: creating/retrieving order. Retries remaining:0
2020-09-09 14:04:10.015 +00:00 [INF] Created ACME Order: https://acme-v02.api.letsencrypt.org/acme/order/96194789/5100808757
2020-09-09 14:04:10.839 +00:00 [INF] Fetching Authorizations.
2020-09-09 14:04:15.014 +00:00 [INF] Got http-01 challenge https://acme-v02.api.letsencrypt.org/acme/chall-v3/7099137101/v5ZffA
2020-09-09 14:04:16.275 +00:00 [INF] Got dns-01 challenge https://acme-v02.api.letsencrypt.org/acme/chall-v3/7099137101/WIx9qQ
2020-09-09 14:04:17.310 +00:00 [INF] Http Challenge Server process unavailable.
2020-09-09 14:04:17.310 +00:00 [INF] Attempting Domain Validation: secure.verkvest.is
2020-09-09 14:04:17.311 +00:00 [INF] Registering and Validating secure.verkvest.is
2020-09-09 14:04:17.311 +00:00 [INF] Performing automated challenge responses (secure.verkvest.is)
2020-09-09 14:04:17.311 +00:00 [INF] Preparing challenge response for the issuing Certificate Authority to check at: domain/.well-known/acme-challenge/Tf8ywd28p_66PGY-m0_35A3iNABNvgW07xI76tRL_oE with content Tf8ywd28p_66PGY-m0_35A3iNABNvgW07xI76tRL_oE.xThJfL9cmPHvWlI1UITjSgsdsa8KWrjDIT2J1ciZmww
2020-09-09 14:04:17.311 +00:00 [INF] If the challenge response file is not accessible at this exact URL the validation will fail and a certificate will not be issued.
2020-09-09 14:04:17.376 +00:00 [INF] Using website path C:\inetpub\wwwroot
2020-09-09 14:04:17.378 +00:00 [INF] Checking URL is accessible: domain/.well-known/acme-challenge/Tf8ywd28p_66PGY-m0_35A3iNABNvgW07xI76tRL_oE [proxyAPI: True, timeout: 5000ms]
2020-09-09 14:04:22.721 +00:00 [INF] (proxy api) URL is not accessible. Result: [404] Resource not accessible, Timeout or Redirected
2020-09-09 14:04:22.722 +00:00 [INF] Checking URL is accessible: domain/.well-known/acme-challenge/Tf8ywd28p_66PGY-m0_35A3iNABNvgW07xI76tRL_oE [proxyAPI: False, timeout: 5000ms]
2020-09-09 14:04:23.436 +00:00 [INF] (local check) URL is accessible. Check passed. HTTP OK
2020-09-09 14:04:23.437 +00:00 [INF] Requesting Validation: secure.verkvest.is
2020-09-09 14:04:23.456 +00:00 [INF] Attempting Challenge Response Validation for Domain: secure.verkvest.is
2020-09-09 14:04:23.457 +00:00 [INF] Registering and Validating secure.verkvest.is
2020-09-09 14:04:23.457 +00:00 [INF] Checking automated challenge response for Domain: secure.verkvest.is
2020-09-09 14:04:24.082 +00:00 [WRN] Challenge response validation still pending. Re-checking [10]…
2020-09-09 14:04:26.111 +00:00 [WRN] Challenge response validation still pending. Re-checking [9]…
2020-09-09 14:04:28.524 +00:00 [INF] Fetching domain/.well-known/acme-challenge/Tf8ywd28p_66PGY-m0_35A3iNABNvgW07xI76tRL_oE: Error getting validation data
2020-09-09 14:04:30.647 +00:00 [INF] Validation of the required challenges did not complete successfully. Fetching domain/.well-known/acme-challenge/Tf8ywd28p_66PGY-m0_35A3iNABNvgW07xI76tRL_oE: Error getting validation data
2020-09-09 14:04:30.648 +00:00 [INF] Validation of the required challenges did not complete successfully. Fetching domain/.well-known/acme-challenge/Tf8ywd28p_66PGY-m0_35A3iNABNvgW07xI76tRL_oE: Error getting validation data
2020-09-09 14:04:30.648 +00:00 [INF] Validation of the required challenges did not complete successfully. Fetching domain/.well-known/acme-challenge/Tf8ywd28p_66PGY-m0_35A3iNABNvgW07xI76tRL_oE: Error getting validation data

Let’s Encrypts http validation works over port 80 so if you block that port then the domain validation process can’t proceed. Open up port 80 and certify will handle the validation using a temporary http validation server.

Thanks this solved my problem!

1 Like