Im getting this error in the acme logs and am unable to get an SSL certificate
HTTP validation failed
acme-mailcow_1 | Tue May 26 21:20:16 BST 2020 - Waiting for Nginx… OK
acme-mailcow_1 | Tue May 26 21:20:16 BST 2020 - Waiting for domain table… OK
acme-mailcow_1 | Tue May 26 21:20:16 BST 2020 - Initializing, please wait…
acme-mailcow_1 | Tue May 26 21:20:16 BST 2020 - Using existing domain rsa key /var/lib/acme/acme/key.pem
acme-mailcow_1 | Tue May 26 21:20:16 BST 2020 - Using existing Lets Encrypt account key /var/lib/acme/acme/account.pe m
acme-mailcow_1 | Tue May 26 21:20:16 BST 2020 - Detecting IP addresses… OK
acme-mailcow_1 | Tue May 26 21:20:35 BST 2020 - Found A record for autodiscover.mydomain.com: 1.2.3.4
acme-mailcow_1 | Tue May 26 21:20:35 BST 2020 - Confirmed A record with IP 1.2.3.4, but HTTP validation failed
acme-mailcow_1 | Tue May 26 21:20:35 BST 2020 - Found A record for autoconfig.mydomain.com: 1.2.3.4
acme-mailcow_1 | Tue May 26 21:20:36 BST 2020 - Confirmed A record with IP 1.2.3.4, but HTTP validation failed
acme-mailcow_1 | Tue May 26 21:20:36 BST 2020 - Found A record for mail.mydomain.com: 1.2.3.4
acme-mailcow_1 | Tue May 26 21:20:36 BST 2020 - Confirmed A record with IP 1.2.3.4, but HTTP validation failed
acme-mailcow_1 | Tue May 26 21:20:36 BST 2020 - Cannot validate any hostnames, skipping Let’s Encrypt for 1 hour.
acme-mailcow_1 | Tue May 26 21:20:36 BST 2020 - Use SKIP_LETS_ENCRYPT=y in mailcow.conf to skip it permanently.
Im running mailcow on its own server (not behind nginx) and have port 80 and 443 open inbound on the firewall
in /opt/mailcow-dockerized/data/conf/nginx/redirect.conf i have the following
server {
root /web;
listen 80 default_server;
listen [::]:80 default_server;
include /etc/nginx/conf.d/server_name.active;
if ( $request_uri ~* “%0A|%0D” ) { return 403; }
location ^~ /.well-known/acme-challenge/ {
allow all;
default_type “text/plain”;
}
location / {
return 301 https://$host$uri$is_args$args;
}
}
If I check the website mail.ctrlf.info with curl I can see the mailcow website OK
Can anyone think of anything else I can check?
Thanks for your help