My domain is: kenpro.com.au I ran this command: certbot certonly --apache --dry-run --cert-name kenmcq -d bridgeontheriverchoir.com , thecleftomaniacs.com ,djkm.com.au,garysmithmusic.com.au,kenpro.com.au,mcquire.au,mcquire.com.au,surryhillsstudio.com.au, tckell.com , www.bridgeontheriverchoir.com , www.t…

Is there a rate limit? I found a comment that there might be a limit of 5 renewals / week. I've been making a lot of changes and might have exceeded 5.

[image] davidjmcq: Detail: 203.23.36.1: Fetching http://tckell.com/.well-known/acme-challenge/4rQxLGLq_1Tw0uhMz6_Bi_naMN3sjJBY-9F3ClV3FhM: Timeout during connect (likely firewall problem) Nah it's not a rate limit, you are just refusing to let Let's Encrypt connect to your site when they chec…

The sites have never been geographically firewalled, so I would be surprised if it was that. The certificates were renewed automatically quite recently. Thanks for the thought though.

Thanks, yes that just an example, but you are (or were) blocking their request somehow. Even if the response was denied (a 404 etc) by Apache it would still connect at least. Testing that url works for me, so you should try your request again. There is a rate limit for failed validations but it's …

[image] davidjmcq: I ran this command: certbot certonly --apache --dry-run Certificate Authority reported these problems: Domain: bridgeontheriverchoir.com Type: connection Detail: 203.23.36.1: Fetching http://bridgeontheriverchoir.com/.well-known/acme-challenge/jH-9YRYRw9DvO4F8HNjRv11fn4…

I just ran the exact same command with and without --dry-run with --dry-run it failed again, same problems without --dry-run it succeeded normally Successfully received certificate. Certificate is saved at: /etc/letsencrypt/live/kenmcq/fullchain.pem Key is saved at: /etc/letsencrypt/li…

[image] davidjmcq: Is this a bug? Should I report it? I don't see how this could be a Let's Encrypt bug. Or even a Certbot bug. The "connection refused" error is something your system actively does to reject the incoming HTTP request. Most often a firewall does that. Let's Encrypt is jus…

It's a public facing IP number. No firewall in the router. I am running a standard Ubuntu server - nothing clever. It's been running for years and I'm the only one who has access (I hope! :smiley:) I suspect the time-outs aren't important. I noticed different domains time out each run, but always…

[image] davidjmcq: BTW, thanks for your replies.... much appreciated. Sure. So, no firewall like fail2ban or similar? Your Drupal 7 system has some kind of caching. Does it have any component doing firewall or IP filter? I didn't check every domain but some do not use Drupal but at least b…

So.... I've been tidying up an old mess... that was the point of the exercise. Somehow I had ended up with two certificates covering mostly the same domain names, although all the apache config files only referenced ONE of the certificates. The other certificate was redundant and I'm not sure how i…

Certbot results in connection refused

Help

Topic		Replies	Views
Certbot renew failed 400 connection refused Help	12	2103	October 12, 2022
Error connection refused Help	9	2649	September 4, 2021
Certbot renew error while using the renew command-connection refused Help	13	4175	October 31, 2019
New certs work - renewals fail Help	4	1808	March 9, 2019
Connection Refused Help	2	507	March 24, 2022

Certbot results in connection refused

Related topics