Cannot renew "AuthorizationError: Incomplete authorizations"

[dlapiduz]

Cannot renew "AuthorizationError: Incomplete authorizations"

[vladejs]

Does your domain DNS points to S3? If your DNS does not point to S3 you will get this Authorization Error

[flyingsky]

My domain points to cloudfront which base on s3. I think every setting is same when I first time to create the certificate.

[vladejs]

What I did is to first point to S3, generate and install the certificate with certbot and then point again to cloudfront

[flyingsky]

cool, that works. I changed my domain redirect url from cloudfront to s3, then renew again. After success, change it back. Thanks.

[vladejs]

Actually, that solution will cause, sometimes, delay in the DNS and certbot server will not be able to identify S3 as the source, will point to CF during some seconds. My solution is update temporary from CF the ViewerProtocolPolicy('allow-all')