LetsEncrypt Error: “likely firewall problem”
up vote
0
down vote
favorite
I have been regularly renewing my SSL certificate before expiry by using these commands:
cd /
sudo wget https://dl.eff.org/certbot-auto
sudo chmod a+x certbot-auto
sudo ./certbot-auto --debug -v --server https://acme-v01.api.letsencrypt.org/directory certonly -d fqdn.com
I didn't renew it in time so it expired, and now when I type the last command I get this result:
Domain: fqdn.com
Type: connection
Detail: Fetching http://fqdn.com/.well-known/acme-challenge/...: Timeout during connect (likely firewall problem)
and says:
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/fqdn.com/fullchain.pem (failure)
When I type the FQDN into https://letsdebug.net, it shows 2 errors:
ANotWorking (ERROR)
fqdn.com has an A (IPv4) record (x.x.x.x) but a request to this address over port 80 did not succeed.
A timeout was experienced while communicating with fqdn.com/x.x.x.x: Get http://fqdn.com/.well-known/acme-challenge/letsdebug-test: context deadline exceeded
Trace:
@0ms: Making a request to http://fqdn.com/.well-known/acme-challenge/letsdebug-test (using initial IP x.x.x.x)
@0ms: Dialing x.x.x.x
@10000ms: Experienced error: context deadline exceeded
and
IssueFromLetsEncrypt (ERROR)
A test authorization for fqdn.com to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
Fetching http://fqdn.com/.well-known/acme-challenge/...: Timeout during connect (likely firewall problem)
It's an EC2 instance on AWS. Previously I only enabled port 22 and port 443 (in Security Groups->Inbound) and it was working fine, and now I've tried enabling port 80 but still have the same problem, so I've disabled port 80 again.
How can I diagnose it further and what is causing the problem?
I also want to set up auto-renewal.
18.04 ssl letsencrypt
asked Dec 1 at 4:20
Gimme the 411
13
add a comment |
up vote
0
down vote
favorite
I have been regularly renewing my SSL certificate before expiry by using these commands:
cd /
sudo wget https://dl.eff.org/certbot-auto
sudo chmod a+x certbot-auto
sudo ./certbot-auto --debug -v --server https://acme-v01.api.letsencrypt.org/directory certonly -d fqdn.com
I didn't renew it in time so it expired, and now when I type the last command I get this result:
Domain: fqdn.com
Type: connection
Detail: Fetching http://fqdn.com/.well-known/acme-challenge/...: Timeout during connect (likely firewall problem)
and says:
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/fqdn.com/fullchain.pem (failure)
When I type the FQDN into https://letsdebug.net, it shows 2 errors:
ANotWorking (ERROR)
fqdn.com has an A (IPv4) record (x.x.x.x) but a request to this address over port 80 did not succeed.
A timeout was experienced while communicating with fqdn.com/x.x.x.x: Get http://fqdn.com/.well-known/acme-challenge/letsdebug-test: context deadline exceeded
Trace:
@0ms: Making a request to http://fqdn.com/.well-known/acme-challenge/letsdebug-test (using initial IP x.x.x.x)
@0ms: Dialing x.x.x.x
@10000ms: Experienced error: context deadline exceeded
and
IssueFromLetsEncrypt (ERROR)
A test authorization for fqdn.com to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
Fetching http://fqdn.com/.well-known/acme-challenge/...: Timeout during connect (likely firewall problem)
It's an EC2 instance on AWS. Previously I only enabled port 22 and port 443 (in Security Groups->Inbound) and it was working fine, and now I've tried enabling port 80 but still have the same problem, so I've disabled port 80 again.
How can I diagnose it further and what is causing the problem?
I also want to set up auto-renewal.
18.04 ssl letsencrypt
asked Dec 1 at 4:20
Gimme the 411
13
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I have been regularly renewing my SSL certificate before expiry by using these commands:
cd /
sudo wget https://dl.eff.org/certbot-auto
sudo chmod a+x certbot-auto
sudo ./certbot-auto --debug -v --server https://acme-v01.api.letsencrypt.org/directory certonly -d fqdn.com
I didn't renew it in time so it expired, and now when I type the last command I get this result:
Domain: fqdn.com
Type: connection
Detail: Fetching http://fqdn.com/.well-known/acme-challenge/...: Timeout during connect (likely firewall problem)
and says:
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/fqdn.com/fullchain.pem (failure)
When I type the FQDN into https://letsdebug.net, it shows 2 errors:
ANotWorking (ERROR)
fqdn.com has an A (IPv4) record (x.x.x.x) but a request to this address over port 80 did not succeed.
A timeout was experienced while communicating with fqdn.com/x.x.x.x: Get http://fqdn.com/.well-known/acme-challenge/letsdebug-test: context deadline exceeded
Trace:
@0ms: Making a request to http://fqdn.com/.well-known/acme-challenge/letsdebug-test (using initial IP x.x.x.x)
@0ms: Dialing x.x.x.x
@10000ms: Experienced error: context deadline exceeded
and
IssueFromLetsEncrypt (ERROR)
A test authorization for fqdn.com to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
Fetching http://fqdn.com/.well-known/acme-challenge/...: Timeout during connect (likely firewall problem)
It's an EC2 instance on AWS. Previously I only enabled port 22 and port 443 (in Security Groups->Inbound) and it was working fine, and now I've tried enabling port 80 but still have the same problem, so I've disabled port 80 again.
How can I diagnose it further and what is causing the problem?
I also want to set up auto-renewal.
18.04 ssl letsencrypt
asked Dec 1 at 4:20
Gimme the 411
13
I have been regularly renewing my SSL certificate before expiry by using these commands:
cd /
sudo wget https://dl.eff.org/certbot-auto
sudo chmod a+x certbot-auto
sudo ./certbot-auto --debug -v --server https://acme-v01.api.letsencrypt.org/directory certonly -d fqdn.com
I didn't renew it in time so it expired, and now when I type the last command I get this result:
Domain: fqdn.com
Type: connection
Detail: Fetching http://fqdn.com/.well-known/acme-challenge/...: Timeout during connect (likely firewall problem)
and says:
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/fqdn.com/fullchain.pem (failure)
When I type the FQDN into https://letsdebug.net, it shows 2 errors:
ANotWorking (ERROR)
fqdn.com has an A (IPv4) record (x.x.x.x) but a request to this address over port 80 did not succeed.
A timeout was experienced while communicating with fqdn.com/x.x.x.x: Get http://fqdn.com/.well-known/acme-challenge/letsdebug-test: context deadline exceeded
Trace:
@0ms: Making a request to http://fqdn.com/.well-known/acme-challenge/letsdebug-test (using initial IP x.x.x.x)
@0ms: Dialing x.x.x.x
@10000ms: Experienced error: context deadline exceeded
and
IssueFromLetsEncrypt (ERROR)
A test authorization for fqdn.com to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
Fetching http://fqdn.com/.well-known/acme-challenge/...: Timeout during connect (likely firewall problem)
It's an EC2 instance on AWS. Previously I only enabled port 22 and port 443 (in Security Groups->Inbound) and it was working fine, and now I've tried enabling port 80 but still have the same problem, so I've disabled port 80 again.
How can I diagnose it further and what is causing the problem?
I also want to set up auto-renewal.
18.04 ssl letsencrypt
18.04 ssl letsencrypt
asked Dec 1 at 4:20
Gimme the 411
13
asked Dec 1 at 4:20
Gimme the 411
13
edited Dec 1 at 4:33
asked Dec 1 at 4:20
Gimme the 411
13
asked Dec 1 at 4:20
Gimme the 411
13
asked Dec 1 at 4:20
Gimme the 411
13
13
add a comment |
add a comment |
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1097577%2fletsencrypt-error-likely-firewall-problem%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1097577%2fletsencrypt-error-likely-firewall-problem%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
