title: Nginx/Certbot - invalid response from domain/.well-known
body: <p>I'm trying to set up <code>https</code> on our web page which runs on <code>Django 1.8</code>. I'm very new in this area so I use <a href="https://certbot.eff.org/#ubuntutrusty-nginx" rel="nofollow noreferrer">Certbot</a>. I followed the instructions until <code>./path/to/certbot-auto certonly</code>.</p>
  
  <blockquote>
    <h2>How would you like to authenticate with the ACME CA?</h2>
    
    <ul>
    <li>1: Place files in webroot directory (webroot) </li>
    <li>2: Spin up a temporary webserver (standalone)</li>
    </ul>
  </blockquote>
  
  <p>I've chosen 1.</p>
  
  <p>Then it wants my domain and the next step is:</p>
  
  <blockquote>
    <p>Select the webroot for salix.sk:</p>
  </blockquote>
  
  <pre><code>&gt;&gt;&gt; /home/django/salix
  </code></pre>
  
  <p>which returns error</p>
  
  <blockquote>
    <p>Waiting for verification... Cleaning up challenges Failed
    authorization procedure. salix.sk (http-01):
    urn:acme:error:unauthorized :: The client lacks sufficient
    authorization :: Invalid response from
    <a href="http://salix.sk/.well-known/acme-challenge/some_code" rel="nofollow noreferrer">http://salix.sk/.well-known/acme-challenge/some_code</a>:
    "      <br>
    Page not"</p>
    
    <p>IMPORTANT NOTES:
     - The following errors were reported by the server:</p>
    
    <p>Domain: salix.sk    Type:   unauthorized    Detail: Invalid
    response from<br>
    <a href="http://salix.sk/.well-known/acme-challenge/some_code" rel="nofollow noreferrer">http://salix.sk/.well-known/acme-challenge/some_code</a>:
    "            
         
         Page not"</p>
    
    <p>To fix these errors, please make sure that your domain name was<br>
    entered correctly and the DNS A record(s) for that domain<br>
    contain(s) the right IP address.</p>
  </blockquote>
  
  <p>I think that I should somehow set the path in my project but can't figure out how. It created a folder <code>.well-known</code> inside the root of my project without any visible files inside. </p>
  
  <p>Do you know what to do?</p>
  
  <p><strong>EDIT:</strong>
  I've changed <code>etc/nginx/sites-available/default</code> adding into server section:</p>
  
  <pre><code>location ~ /.well-known {
                      allow all;
              }
  </code></pre>
  
  <p>So:</p>
  
  <pre><code>server {
      listen 80 default_server;
      listen [::]:80 default_server ipv6only=on;
  
      root /usr/share/nginx/html;
      index index.html index.htm;
  
      # Make site accessible from http://localhost/
      server_name localhost;
  
      location / {
          # First attempt to serve request as file, then
          # as directory, then fall back to displaying a 404.
          try_files $uri $uri/ =404;
          # Uncomment to enable naxsi on this location
          # include /etc/nginx/naxsi.rules
      }
  
      # Only for nginx-naxsi used with nginx-naxsi-ui : process denied requests
      #location /RequestDenied {
      #   proxy_pass http://127.0.0.1:8080;    
      #}
  
      #error_page 404 /404.html;
  
      # redirect server error pages to the static page /50x.html
      #
      #error_page 500 502 503 504 /50x.html;
      #location = /50x.html {
      #   root /usr/share/nginx/html;
      #}
  
      # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
      #
      #location ~ \.php$ {
      #   fastcgi_split_path_info ^(.+\.php)(/.+)$;
      #   # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
      #
      #   # With php5-cgi alone:
      #   fastcgi_pass 127.0.0.1:9000;
      #   # With php5-fpm:
      #   fastcgi_pass unix:/var/run/php5-fpm.sock;
      #   fastcgi_index index.php;
      #   include fastcgi_params;
      #}
  
      # deny access to .htaccess files, if Apache's document root
      # concurs with nginx's one
      #
      #location ~ /\.ht {
      #   deny all;
      #}
      location ~ /.well-known {
                  allow all;
          }
  }
  </code></pre>
  
  <p>Which didn't help too.</p>