Am I blocked? SSL: UNEXPECTED_EOF_WHILE_READING

[st0necraft]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: funkerydoo.com

I ran this command: requests.post (python)

It produced this output:

  File "/usr/lib64/python3.11/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.11/ssl.py", line 1108, in _create
    self.do_handshake()
  File "/usr/lib64/python3.11/ssl.py", line 1379, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLEOFError: [SSL: UNEXPECTED_EOF_WHILE_READING] EOF occurred in violation of protocol (_ssl.c:1006)

My web server is (include version): nginx 1.20.1

The operating system my web server runs on is (include version): Alma Linux 9 5.14.0-362.24.2.el9_3.x86_64

My hosting provider, if applicable, is: Hetzner

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 2.9.0

I am not certain this is a certbot issue, but based on this and this I am wondering if I might be blocked in some way. Certbot issued my site the certificate just a few minutes prior, so it would seem I am not blocked from getting certificates.

A different domain, which I as far as I can tell I am configuring identically, works every time. I have destroyed and re-deployed these two servers repeatedly, and the problem only seems to be with funkerydoo.com.

This post request is to Mailgun, so it could be a Mailgun problem too. However based on the threads I linked above, I thought I would try here first.

[schoen]

Hi @st0necraft,

If I understand you right, you're saying that you're making a TLS connection from your server to Mailgun, using Python code that you or someone else wrote, and you're getting back this ssl.SSLEOFError in Python. Is that correct?

If that's the case, that particular problem doesn't involve Let's Encrypt in any way, and Let's Encrypt would have no involvement or visibility into why that connection is failing.

[st0necraft]

Thanks. Maybe Mailgun took similar measures. I thought the https communication with the mailgun api was using the LE cert for my site, as it as is being sent from the host itself, so I thought maybe that could be involved somehow.