Httpauth and SSL certificate renewal

Community Support
1

Hi,
I have a site with httpauth activated. SSL certificate renewal is not working and an error message shows up:
Error: Let's Encrypt validation status 400 (domain.com). Details: Unable to update challenge :: authorization must be pending

What’s the best way to solve this?

2

Check the lets encrypt log, probaly your httpauth also restricts the LE validation process, so you would probaly need to exclude that path → SSL Certificates and Let's Encrypt — Hestia Control Panel documentation

1 Like
3

Trying lo lookup for LE logs, but there’s nothing like LE-{user}-{domain}.{time}.log in /var/log/hestia…

I’m using HestiaCP 1.6

4

LE-{user}-{domain}.log should work fine

5

There isn’t any log file starting with LE* in /var/log/hestia (…)

6

How do you do that?

7

No idea how you implemented htaccess, probaly gibe it a try there.

8

Sorry, didn’t mention it… I’m using Nginx and I implemented SSL certificates through HestiaCP feature.
Usually, using certbot I add a directive in Nginx virtual host file like this:

location ~ /\.(?!well-known\/) {
       auth_basic off;
       allow all;
	}
9

looks good, place that into your template and it should work.

10

Ok, but looking into the “wordpress” default template I’m using there’s already a default directive that says:

location ~ /\.(?!well-known\/) {
        deny all;
        return 404;
    }

What is it used for?

11

It denies access for all hidden folders

12

It denies access to all hidden folders, except LE well-known folder?

13

Yes …