Certbot not using port

The HTTP-01 challenge can only be done on port 80. Allowing clients to specify arbitrary ports would make the challenge less secure, and so it is not allowed by the ACME standard.

HTTP-01 challenge

--http-01-port option exists to be able to port-forward/reverse-proxy 80→<specified_port>

3 Likes