[ERROR] Failed to get LetsEncrypt cert

Hi all.
After command pritunl reset-ssl-cert
[ERROR] Failed to get LetsEncrypt cert

LOGS

[thriving-fields-6695][2022-08-30 21:41:41,386][INFO] Settings changed, restarting server…
ssl_changed = false
cert_changed = true
key_changed = true
port_changed = false
redirect_server_changed = false
reverse_proxy_changed = false
[thriving-fields-6695][2022-08-30 21:41:41,715][INFO] Server restarting…
[thriving-fields-6695][2022-08-30 21:41:41,740][INFO] Starting server
selinux_context = “none”
[thriving-fields-6695][2022-08-30 21:41:41,745][INFO] Generating server certificate…
[thriving-fields-6695][2022-08-30 21:42:27,245][INFO] Parsing account key…
[thriving-fields-6695][2022-08-30 21:42:27,257][INFO] Parsing CSR…
[thriving-fields-6695][2022-08-30 21:42:27,265][INFO] Found domains: vultr-eu.XXXX.XXX
[thriving-fields-6695][2022-08-30 21:42:27,265][INFO] Getting directory…
[thriving-fields-6695][2022-08-30 21:42:27,652][INFO] Directory found!
[thriving-fields-6695][2022-08-30 21:42:27,652][INFO] Registering account…
[thriving-fields-6695][2022-08-30 21:42:28,568][INFO] Registered!
[thriving-fields-6695][2022-08-30 21:42:28,569][INFO] Creating new order…
[thriving-fields-6695][2022-08-30 21:42:29,661][INFO] Order created!
[thriving-fields-6695][2022-08-30 21:42:30,103][INFO] Verifying vultr-eu.XXXX.XXX…
[thriving-fields-6695][2022-08-30 21:42:33,829][ERROR] Failed to get LetsEncrypt cert
Traceback (most recent call last):
File “/usr/lib/pritunl/lib/python3.8/site-packages/pritunl/handlers/settings.py”, line 1072, in settings_put
acme.update_acme_cert()
File “/usr/lib/pritunl/lib/python3.8/site-packages/pritunl/acme.py”, line 69, in update_acme_cert
cert = get_acme_cert(settings.app.acme_key, csr)
File “/usr/lib/pritunl/lib/python3.8/site-packages/pritunl/acme.py”, line 41, in get_acme_cert
certificate = acmetiny.get_crt(
File “/usr/lib/pritunl/lib/python3.8/site-packages/pritunl/acmetiny.py”, line 138, in get_crt
raise ValueError(“Challenge did not pass for {0}: {1}”.format(domain, authorization))
ValueError: Challenge did not pass for vultr-eu.XXXX.XX: {‘identifier’: {‘type’: ‘dns’, ‘value’: ‘vultr-eu.XXXX.XX’}, ‘status’: ‘invalid’, ‘expires’: ‘2022-09-06T21:42:29Z’, ‘challenges’: [{‘type’: ‘http-01’, ‘status’: ‘invalid’, ‘error’: {‘type’: ‘urn:ietf:params:acme:error:unauthorized’, ‘detail’: ‘70.XXX.XXX.XXX: Invalid response from XXXXX://vultr-eu.XXXX.XX/.well-known/acme-challenge/XXX-XXXX: 404’, ‘status’: 403}, ‘url’: ‘XXXXX://acme-v02.api.letsencrypt.org/acme/chall-v3/XXXX/XXX’, ‘token’: ‘XXX-XXXX’, ‘validationRecord’: [{‘url’: ‘XXXX://vultr-eu.XXXX.XXX/.well-known/acme-challenge/XXX-XXXX’, ‘hostname’: ‘vultr-eu.XXXX.XXX’, ‘port’: ‘80’, ‘addressesResolved’: [‘70.XXX.XXX.XXX’], ‘addressUsed’: ‘70.XXX.XXX.XXX’}], ‘validated’: ‘2022-08-30T21:42:30Z’}]}
acme_domain = “vultr-eu.XXXX.XX”

  • hide domain XXXX.XX
  • hide ip XXX.XXX.XXX
  • hide link http XXXX
  • hide link https XXXXX

thanks for the help

This could be an issue with the firewall or DNS. The Lets Encrypt servers need access to HTTP port 80 on the Pritunl host and the domain name must resolve to the Pritunl host.