<?xml version="1.0" encoding="UTF-8"?>        <rss version="2.0"
             xmlns:atom="http://www.w3.org/2005/Atom"
             xmlns:dc="http://purl.org/dc/elements/1.1/"
             xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
             xmlns:admin="http://webns.net/mvcb/"
             xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
             xmlns:content="http://purl.org/rss/1.0/modules/content/">
        <channel>
            <title>
									Problem requesting Lest&#039;s encrypt certificate - Install &amp; Setup				            </title>
            <link>https://community.zextras.com/forum/carbonio-setup/problem-requesting-lests-encrypt-certificate/</link>
            <description>Zextras Community Discussion Board</description>
            <language>en-US</language>
            <lastBuildDate>Tue, 15 Sep 2026 15:16:39 +0000</lastBuildDate>
            <generator>wpForo</generator>
            <ttl>60</ttl>
							                    <item>
                        <title>RE: Problem requesting Lest&#039;s encrypt certificate</title>
                        <link>https://community.zextras.com/forum/carbonio-setup/problem-requesting-lests-encrypt-certificate/#post-11149</link>
                        <pubDate>Tue, 30 Sep 2025 14:50:23 +0000</pubDate>
                        <description><![CDATA[I have a problem generating a certificate both from the GUI and from the command line. During the generation process, an error occurs.



 


Certbot failed to authenticate some domai...]]></description>
                        <content:encoded><![CDATA[<p data-start="57" data-end="211"><strong data-start="57" data-end="209">I have a problem generating a certificate both from the GUI and from the command line. During the generation process, an error occurs.</strong></p>
<div class="contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary">
<div class="sticky top-9">
<div class="absolute end-0 bottom-0 flex h-9 items-center pe-2">
<div class="bg-token-bg-elevated-secondary text-token-text-secondary flex items-center gap-4 rounded-sm px-2 font-sans text-xs"> </div>
</div>
</div>
<div class="overflow-y-auto p-4" dir="ltr"><code class="whitespace-pre!"><span>Certbot failed to authenticate some <span class="hljs-title function_">domains</span> <span class="hljs-params">(authenticator: standalone)</span>. 
The Certificate Authority reported these problems:
  Domain: mail.bskw.biz
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up A <span class="hljs-keyword">for</span> mail.domain.biz - check that a DNS <span class="hljs-keyword">record</span> <span class="hljs-title class_">exists</span> <span class="hljs-keyword">for</span> <span class="hljs-built_in">this</span> domain;
          DNS problem: NXDOMAIN looking up AAAA <span class="hljs-keyword">for</span> mail.domain.biz - check that a DNS <span class="hljs-keyword">record</span> <span class="hljs-title class_">exists</span> <span class="hljs-keyword">for</span> <span class="hljs-built_in">this</span> domain.
</span></code></div>
</div>
<p data-start="618" data-end="876"><strong data-start="618" data-end="876">Both the A record and <code data-start="642" data-end="669">host -t A mail.domain.biz</code> return the IP address. This is a local IP address because it is a local domain, and in the local DNS there is also an MX record, which is shown by the command <code data-start="829" data-end="857">host -t MX mail.domain.biz</code> responding with:</strong></p>
<div class="contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary">
<div class="sticky top-9">
<div class="absolute end-0 bottom-0 flex h-9 items-center pe-2">
<div class="bg-token-bg-elevated-secondary text-token-text-secondary flex items-center gap-4 rounded-sm px-2 font-sans text-xs"> </div>
</div>
</div>
<div class="overflow-y-auto p-4" dir="ltr"><code class="whitespace-pre!"><span>mail.<span class="hljs-keyword">domain</span>.biz mail <span class="hljs-keyword">is</span> handled <span class="hljs-keyword">by</span> <span class="hljs-number">10</span> mail.<span class="hljs-keyword">domain</span>.biz.
</span></code></div>
</div>
<p data-start="942" data-end="995"><strong data-start="942" data-end="995">Where should I look for the cause of the problem?</strong></p>]]></content:encoded>
						                            <category domain="https://community.zextras.com/forum/carbonio-setup/">Install &amp; Setup</category>                        <dc:creator>galdas1</dc:creator>
                        <guid isPermaLink="true">https://community.zextras.com/forum/carbonio-setup/problem-requesting-lests-encrypt-certificate/#post-11149</guid>
                    </item>
				                    <item>
                        <title>RE: Problem requesting Lest&#039;s encrypt certificate</title>
                        <link>https://community.zextras.com/forum/carbonio-setup/problem-requesting-lests-encrypt-certificate/#post-5954</link>
                        <pubDate>Fri, 06 Oct 2023 06:34:31 +0000</pubDate>
                        <description><![CDATA[@adassoft
Hi,
Yes, you are correct that it is about redirection. In Carbonio CE, the default value for ReverseProxyMailMode is by default set to https hence the server only accepts connect...]]></description>
                        <content:encoded><![CDATA[<p>@adassoft</p>
<p>Hi,</p>
<p>Yes, you are correct that it is about redirection. In Carbonio CE, the default value for ReverseProxyMailMode is by default set to https hence the server only accepts connection through https.</p>
<pre contenteditable="false">zextras@mail:~$ carbonio prov gs mail.sampleserver.xyz | grep -i reverseproxymailmode
zimbraReverseProxyMailMode: https
zextras@mail:~$</pre>
<p>Therefore, when Let's Encrypt is trying to connect to the server using HTTP protocol, and it was not been able to establish the connection. So when you try to configure Let's Encrypt please set the mode from HTTPS to REDIRECT as follows:</p>
<pre contenteditable="false">zextras@mail:~$ carbonio prov ms mail.sampleserver.xyz zimbraReverseProxyMailMode redirect</pre>
<p>Restart Proxy Service.</p>
<pre contenteditable="false">zextras@mail:~$ zmproxyctl restart</pre>
<p>Then, try to generate a Let's Encrypt Certificate using a Long/Short Chain.</p>
<p> </p>
<p>Note: After successful Let's Encrypt Certificate deployment, you can revert the ReverseProxyMailMode to HTTPS again.</p>
<p> </p>
<p>Hope it helps.</p>
<p> </p>
<p>Regards,</p>
<p>Sharif</p>]]></content:encoded>
						                            <category domain="https://community.zextras.com/forum/carbonio-setup/">Install &amp; Setup</category>                        <dc:creator>Sharif</dc:creator>
                        <guid isPermaLink="true">https://community.zextras.com/forum/carbonio-setup/problem-requesting-lests-encrypt-certificate/#post-5954</guid>
                    </item>
				                    <item>
                        <title>Problem requesting Lest&#039;s encrypt certificate</title>
                        <link>https://community.zextras.com/forum/carbonio-setup/problem-requesting-lests-encrypt-certificate/#post-5881</link>
                        <pubDate>Thu, 28 Sep 2023 12:01:08 +0000</pubDate>
                        <description><![CDATA[I&#039;m trying to request Lest&#039;s encrypt certificate, but without success, I noticed that the redirection is not working, if I typeit doesn&#039;t redirect tocould that be the problem?]]></description>
                        <content:encoded><![CDATA[<p>I'm trying to request Lest's encrypt certificate, but without success, I noticed that the redirection is not working, if I type http://mail.exemplo.com it doesn't redirect to https://mail.exemplo.com, could that be the problem?</p>]]></content:encoded>
						                            <category domain="https://community.zextras.com/forum/carbonio-setup/">Install &amp; Setup</category>                        <dc:creator>adassoft</dc:creator>
                        <guid isPermaLink="true">https://community.zextras.com/forum/carbonio-setup/problem-requesting-lests-encrypt-certificate/#post-5881</guid>
                    </item>
							        </channel>
        </rss>
		