Cannot vertify for SSL

Help
26

Cool.

Now the moment of truth. What do you see when you run:

curl -I 192.168.1.50:80
2 Likes
27

curl -I 192.168.1.50:80
HTTP/1.1 400 Bad Request
Date: Sun, 14 Nov 2021 02:54:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-WkJMNlo0U3R6b1FHWXI3TklxN3h5cXlNV3piUmM2ZVJMKzFWRnZXVUdhRT06SWxPT051eWE5dFplSjh5aWJPcVhvNVhKRkFkvZz0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src Q5citJQd2JyghWeO%2Fji%2B%2BBLQe2iSckJdrfYjQaAnEYljvlVwTvpsektAJ5AISKqi6Y2PzJk%2Fb7G; path=/; HttpOnly; SameSite=Lax
Set-Cookie: ocrl6jw2lgwt=hhkg3579pfe6lr3vu7nnhnbuvs; path=/; HttpOnly; SameSite=Lax
Set-Cookie: nc_sameSiteCookielax=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie: nc_sameSiteCookiestrict=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
Connection: close
Content-Type: text/html; charset=UTF-8

1 Like
28

I see.

It seems like the first two port forwarding rules in DD-WRT are not working. At least, not when visiting your IP from the internet. (Which is what matters for Let's Encrypt).

Maybe you could try removing them and re-adding them? I'm afraid I don't really have any other ideas.

3 Likes
29

It was the firmware on DDWRT.

I reflashed original firmware, forwarded ports and it worked fine using certonly.

Also tested using the cable directly plugged into modem.

Many thanks for everyone's help

3 Likes
30

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.