Getting urn:ietf:params:acme:error:unauthorized in http-01 challenge about acme4j HOT 2 CLOSED

Setting up the acme-challenge looks good to me.

The problem is that your challenge isn't tested locally by acme4j, but externally by the Let's Encrypt staging server. So the test was executed against the real example.com domain. In the error details you can see their IP (2606:2800:220:1:248:1893:25c8:1946) and their standard HTML response.

You either need to make your Nginx reachable from the outside, and use a real domain that can actually be checked by Let's Encrypt.

Alternatively, you can run a local service like Boulder or Pebble, and create your own test certificates. Boulder is the productive service that is also used by Let's Encrypt, while Pebble is a lightweight test service. acme4j uses Pebble for the integration tests, so you may find a good example in the acme4j-it/pom.xml file. Also see the Testing acme4j chapter.

from acme4j.

@shred Thanks for the detailed explanation. Closing this issue.

from acme4j.