In a local environment, step 4 works but step 5 never populates about gethttpsforfree

[jbuttery]

I just added an alert() for debugging into the for loop there:

for(var domain in DOMAINS){
    alert(domain);
    if(DOMAINS[domain]['confirmed'] !== true){
        all_confirmed = false;
    }
}

...and both hostnames show up in the alert() dialogs as you'd expect. So, I guess it's the "confirmed" value that's not getting set?

[diafygi]

I've added a debug mode. Can you please update your copy of the page and add ?debug to the url (e.g. https://gethttpsforfree.com/?debug)? After that, please let me know what printed in your console, when you get the error.

[amn41]

I'm experiencing the same issue, having just loaded the page from https://gethttpsforfree.com/

Final step seems to be messing up, as console shows a 400 response from lets encrypt https://acme-v01.api.letsencrypt.org/acme/challenge

[diafygi]

@amn41 ok, what's the responseText of the 400 response?

[amn41]

{"type":"urn:acme:error:malformed","detail":"Unable to read/verify body :: JWS has invalid anti-replay nonce","status":400}

[diafygi]

@amn41 can you please clear your cache and reload? the anti-reply nonce issue usually occurs when your browser caches responses

[jbuttery]

Well, it's working now, and I think I might be going crazy. I could swear before, in Step 4, there was just the one section to verify ownership. I figured it was OK since one SAN name is a subdomain of the other, but it still seemed a bit odd. Today, though, there are definitely two sections (one per SAN name) and as soon as I did the verify on both of them, Step 5 showed up with the cert instantly.

Did this actually change, or did I somehow manage to miss that there was a verify section per hostname when I was doing this before?

[diafygi]

I don't think anything changed, but might have been a bad cache or something. Closing this issue.