Всем доброй ночи!
Столкнулся с проблемой, но обо всём по-порядку. Затеяли миграцию серверов с TimeWeb на Beget. Дешевле, поддержка работает отлично, доступность сервисов и серверов замечательная… В общем, задумали.
Для теста я сделал копию сайтов с боевого сервака (BitrixVM 7, CentOS 7) ТаймВэба на тестовый Бегет (BitrixVM 9, CentOS 9). Всё вроде работает, но разрабы слёзно просят нормальный сертификат SSL. Решение - Let`s Encrypt. Запускаю процедуру стандартными средствами Битрикса и получаю вот такую лажу:
[root@abvgdeyka ~]# /home/bitrix/dehydrated/dehydrated -c
# INFO: Using main config file /home/bitrix/dehydrated/config
Processing testsite.xxx.ru
+ Signing domains...
+ Generating private key...
+ Generating signing request...
+ Requesting new certificate order from CA...
+ Received 1 authorizations URLs from the CA
+ Handling authorization for testsite.xxx.ru
+ 1 pending challenge(s)
+ Deploying challenge tokens...
+ Responding to challenge for testsite.xxx.ru authorization...
+ Cleaning challenge tokens...
+ Challenge validation has failed :(
ERROR: Challenge is invalid! (returned: invalid) (result: ["type"] "http-01"
["url"] "https://acme-v02.api.letsencrypt.org/acme/chall/2346723357/507158094397/8IxDIw"
["status"] "invalid"
["validated"] "2025-04-17T22:07:49Z"
["error","type"] "urn:ietf:params:acme:error:unauthorized"
["error","detail"] "45.xxx.xxx.157: Invalid response from https://testsite.xxx.ru:443/404.php: 404"
["error","status"] 403
["error"] {"type":"urn:ietf:params:acme:error:unauthorized","detail":"45.xxx.xxx.157: Invalid response from https://testsite.xxx.ru:443/404.php: 404","status":403}
["token"] "AWMG3fczwGXuRSq9IjaaEqbA8I83hDqVE7g5SLqy-7U"
["validationRecord",0,"url"] "http://testsite.xxx.ru/.well-known/acme-challenge/AWMG3fczwGXuRSq9IjaaEqbA8I83hDqVE7g5SLqy-7U"
["validationRecord",0,"hostname"] "testsite.xxx.ru"
["validationRecord",0,"port"] "80"
["validationRecord",0,"addressesResolved",0] "45.xxx.xxx.157"
["validationRecord",0,"addressesResolved"] ["45.xxx.xxx.157"]
["validationRecord",0,"addressUsed"] "45.xxx.xxx.157"
["validationRecord",0] {"url":"http://testsite.xxx.ru/.well-known/acme-challenge/AWMG3fczwGXuRSq9IjaaEqbA8I83hDqVE7g5SLqy-7U","hostname":"testsite.xxx.ru","port":"80","addressesResolved":["45.xxx.xxx.157"],"addressUsed":"45.xxx.xxx.157"}
["validationRecord",1,"url"] "https://testsite.xxx.ru/.well-known/acme-challenge/AWMG3fczwGXuRSq9IjaaEqbA8I83hDqVE7g5SLqy-7U"
["validationRecord",1,"hostname"] "testsite.xxx.ru"
["validationRecord",1,"port"] "443"
["validationRecord",1,"addressesResolved",0] "45.xxx.xxx.157"
["validationRecord",1,"addressesResolved"] ["45.xxx.xxx.157"]
["validationRecord",1,"addressUsed"] "45.xxx.xxx.157"
["validationRecord",1] {"url":"https://testsite.xxx.ru/.well-known/acme-challenge/AWMG3fczwGXuRSq9IjaaEqbA8I83hDqVE7g5SLqy-7U","hostname":"testsite.xxx.ru","port":"443","addressesResolved":["45.xxx.xxx.157"],"addressUsed":"45.xxx.xxx.157"}
["validationRecord",2,"url"] "https://testsite.xxx.ru:443/404.php"
["validationRecord",2,"hostname"] "testsite.xxx.ru"
["validationRecord",2,"port"] "443"
["validationRecord",2,"addressesResolved",0] "45.xxx.xxx.157"
["validationRecord",2,"addressesResolved"] ["45.xxx.xxx.157"]
["validationRecord",2,"addressUsed"] "45.xxx.xxx.157"
["validationRecord",2] {"url":"https://testsite.xxx.ru:443/404.php","hostname":"testsite.xxx.ru","port":"443","addressesResolved":["45.xxx.xxx.157"],"addressUsed":"45.xxx.xxx.157"}
["validationRecord"] [{"url":"http://testsite.xxx.ru/.well-known/acme-challenge/AWMG3fczwGXuRSq9IjaaEqbA8I83hDqVE7g5SLqy-7U","hostname":"testsite.xxx.ru","port":"80","addressesResolved":["45.xxx.xxx.157"],"addressUsed":"45.xxx.xxx.157"},{"url":"https://testsite.xxx.ru/.well-known/acme-challenge/AWMG3fczwGXuRSq9IjaaEqbA8I83hDqVE7g5SLqy-7U","hostname":"testsite.xxx.ru","port":"443","addressesResolved":["45.xxx.xxx.157"],"addressUsed":"45.xxx.xxx.157"},{"url":"https://testsite.xxx.ru:443/404.php","hostname":"testsite.xxx.ru","port":"443","addressesResolved":["45.xxx.xxx.157"],"addressUsed":"45.xxx.xxx.157"}])
В чём может быть причина?
Ры.Сы. Разумеется страница 404.php доступна и отрабатывает. Хотя я в целом не понимаю сути его претензии. Ры.Сы.2. На текущий момент DNS управляются на TimeWeb, а на Beget только сам сервер.
