# Cetificat wen ubuntu 18-04 lts server speedtest

**URL:** <https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806>\
**Category:** Help\
**Created:** [March 4, 2019, 8:54pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806 "2019-03-04T20:54:34Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![lebasto7](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@lebasto7](https://community.letsencrypt.org/u/lebasto7)\
**Post date:** [March 4, 2019, 8:54pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/1 "2019-03-04T20:54:34Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:speedtest.skyvisiongn.com

I ran this command: sudo certbot --apache

It produced this output: root@speedserver:~# sudo certbot --apache  
Saving debug log to /var/log/letsencrypt/letsencrypt.log  
Plugins selected: Authenticator apache, Installer apache  
Enter email address (used for urgent renewal and security notices) (Enter ‘c’ to  
cancel): [isbban@gmail.com](mailto:isbban@gmail.com)  
An unexpected error occurred:  
Traceback (most recent call last):  
File “/usr/lib/python3/dist-packages/urllib3/connection.py”, line 141, in \_new \_conn  
(self.host, self.port), self.timeout, \*\*extra\_kw)  
File “/usr/lib/python3/dist-packages/urllib3/util/connection.py”, line 60, in create\_connection  
for res in socket.getaddrinfo(host, port, family, socket.SOCK\_STREAM):  
File “/usr/lib/python3.6/socket.py”, line 745, in getaddrinfo  
for res in \_socket.getaddrinfo(host, port, family, type, proto, flags):  
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):  
File “/usr/lib/python3/dist-packages/urllib3/connectionpool.py”, line 601, in urlopen  
chunked=chunked)  
File “/usr/lib/python3/dist-packages/urllib3/connectionpool.py”, line 346, in \_make\_request  
self.\_validate\_conn(conn)  
File “/usr/lib/python3/dist-packages/urllib3/connectionpool.py”, line 852, in \_validate\_conn  
conn.connect()  
File “/usr/lib/python3/dist-packages/urllib3/connection.py”, line 284, in conn ect  
conn = self.\_new\_conn()  
File “/usr/lib/python3/dist-packages/urllib3/connection.py”, line 150, in \_new \_conn  
self, “Failed to establish a new connection: %s” % e)  
urllib3.exceptions.NewConnectionError: \<urllib3.connection.VerifiedHTTPSConnecti on object at 0x7ff18819e828\>: Failed to establish a new connection: [Errno -2] N ame or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):  
File “/usr/lib/python3/dist-packages/requests/adapters.py”, line 440, in send  
timeout=timeout  
File “/usr/lib/python3/dist-packages/urllib3/connectionpool.py”, line 639, in urlopen  
\_stacktrace=sys.exc\_info()[2])  
File “/usr/lib/python3/dist-packages/urllib3/util/retry.py”, line 388, in incr ement  
raise MaxRetryError(\_pool, url, error or ResponseError(cause))  
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host=‘acme-v02.api.letsenc [rypt.org](http://rypt.org)’, port=443): Max retries exceeded with url: /directory (Caused by NewCo nnectionError(’\<urllib3.connection.VerifiedHTTPSConnection object at 0x7ff18819e 828\>: Failed to establish a new connection: [Errno -2] Name or service not known ',))

During handling of the above exception, another exception occurred:

requests.exceptions.ConnectionError: HTTPSConnectionPool(host=‘acme-v02.api.lets [encrypt.org](http://encrypt.org)’, port=443): Max retries exceeded with url: /directory (Caused by Ne wConnectionError(’\<urllib3.connection.VerifiedHTTPSConnection object at 0x7ff188 19e828\>: Failed to establish a new connection: [Errno -2] Name or service not kn own’,))  
Please see the logfiles in /var/log/letsencrypt for more details.

My web server is (include version): apache

The operating system my web server runs on is (include version): ubuntu 18

My hosting provider, if applicable, is: hostinger

I can login to a root shell on my machine (yes or no, or I don’t know): oui

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): non

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot):

NB: **I do not see the dns plugin to host him hostinger**

---

<div class="post-metadata">

**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\
**Post date:** [March 4, 2019, 9:08pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/2 "2019-03-04T21:08:13Z")

</div>

It looks like your server does not have the ability to resolve DNS.

What does this show?

```
host acme-v02.api.letsencrypt.org
dig acme-v02.api.letsencrypt.org
```

---

<div class="post-metadata">

**Author:** ![lebasto7](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@lebasto7](https://community.letsencrypt.org/u/lebasto7)\
**Post date:** [March 4, 2019, 9:12pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/3 "2019-03-04T21:12:28Z")

</div>

why and how??  
why and how  
i have installed an esxi there’s three server running on the same machine it works and why not

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [March 4, 2019, 9:42pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/4 "2019-03-04T21:42:21Z")

</div>

@lebasto7, @_az would like you to run those two commands on your server and show the output here.

The error message that you saw from Certbot suggests that your server can’t perform DNS lookups. This isn’t necessarily inconsistent with having some kinds of services working properly on your server, because not everything needs to perform DNS lookups in order to function. (However, if your server’s ability to do DNS lookups is broken, other things might not work—like applying software updates!)

---

<div class="post-metadata">

**Author:** ![lebasto7](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@lebasto7](https://community.letsencrypt.org/u/lebasto7)\
**Post date:** [March 4, 2019, 11:25pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/5 "2019-03-04T23:25:02Z")

</div>

why commands???  
me when I listen this here is the error he sends

**root@speedserver:~# sudo certbot --apache**  
Saving debug log to /var/log/letsencrypt/letsencrypt.log  
Plugins selected: Authenticator apache, Installer apache  
Enter email address (used for urgent renewal and security notices) (Enter ‘c’ to  
cancel): [bangoura@skyvision-ms.net](mailto:bangoura@skyvision-ms.net)  
An unexpected error occurred:  
Traceback (most recent call last):  
File “/usr/lib/python3/dist-packages/urllib3/connection.py”, line 141, in \_new\_conn  
(self.host, self.port), self.timeout, \*\*extra\_kw)  
File “/usr/lib/python3/dist-packages/urllib3/util/connection.py”, line 60, in create\_connection  
for res in socket.getaddrinfo(host, port, family, socket.SOCK\_STREAM):  
File “/usr/lib/python3.6/socket.py”, line 745, in getaddrinfo  
for res in \_socket.getaddrinfo(host, port, family, type, proto, flags):  
socket.gaierror: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):  
File “/usr/lib/python3/dist-packages/urllib3/connectionpool.py”, line 601, in urlopen  
chunked=chunked)  
File “/usr/lib/python3/dist-packages/urllib3/connectionpool.py”, line 346, in \_make\_request  
self.\_validate\_conn(conn)  
File “/usr/lib/python3/dist-packages/urllib3/connectionpool.py”, line 852, in \_validate\_conn  
conn.connect()  
File “/usr/lib/python3/dist-packages/urllib3/connection.py”, line 284, in connect  
conn = self.\_new\_conn()  
File “/usr/lib/python3/dist-packages/urllib3/connection.py”, line 150, in \_new\_conn  
self, “Failed to establish a new connection: %s” % e)  
urllib3.exceptions.NewConnectionError: \<urllib3.connection.VerifiedHTTPSConnection object at 0x7fd428385828\>: Failed to establish a new connection: [Errno -2] Name or service not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):  
File “/usr/lib/python3/dist-packages/requests/adapters.py”, line 440, in send  
timeout=timeout  
File “/usr/lib/python3/dist-packages/urllib3/connectionpool.py”, line 639, in urlopen  
\_stacktrace=sys.exc\_info()[2])  
File “/usr/lib/python3/dist-packages/urllib3/util/retry.py”, line 388, in increment  
raise MaxRetryError(\_pool, url, error or ResponseError(cause))  
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host=‘[acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org)’, port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError(’\<urllib3.connection.VerifiedHTTPSConnection object at 0x7fd428385828\>: Failed to establish a new connection: [Errno -2] Name or service not known’,))

During handling of the above exception, another exception occurred:

requests.exceptions.ConnectionError: HTTPSConnectionPool(host=‘[acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org)’, port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError(’\<urllib3.connection.VerifiedHTTPSConnection object at 0x7fd428385828\>: Failed to establish a new connection: [Errno -2] Name or service not known’,))  
Please see the logfiles in /var/log/letsencrypt for more details.

**and why this error**

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [March 4, 2019, 11:25pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/6 "2019-03-04T23:25:45Z")

</div>

This error is apparently because your server is not able to perform DNS lookups.

@_az would like you to run these commands and show their output in order to confirm that this is the problem.

---

<div class="post-metadata">

**Author:** ![lebasto7](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@lebasto7](https://community.letsencrypt.org/u/lebasto7)\
**Post date:** [March 4, 2019, 11:27pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/7 "2019-03-04T23:27:45Z")

</div>

he wrote me no order for execution

---

<div class="post-metadata">

**Author:** ![lebasto7](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@lebasto7](https://community.letsencrypt.org/u/lebasto7)\
**Post date:** [March 4, 2019, 11:43pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/8 "2019-03-04T23:43:12Z")

</div>

you wanted to execute a command then it’s the qeulle ???

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [March 4, 2019, 11:47pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/9 "2019-03-04T23:47:29Z")

</div>

These two:

```auto
host acme-v02.api.letsencrypt.org
dig acme-v02.api.letsencrypt.org

```

If you have trouble with this discussion in English, we also have a category for help in French:

[https://community.letsencrypt.org/c/help/aide-en-francais](https://community.letsencrypt.org/c/help/aide-en-francais)

---

<div class="post-metadata">

**Author:** ![lebasto7](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@lebasto7](https://community.letsencrypt.org/u/lebasto7)\
**Post date:** [March 5, 2019, 6:32am UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/10 "2019-03-05T06:32:59Z")

</div>

here is the message  
1st:  
\*\*root@speedserver:~# host [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org)  
;; connection timed out; no servers could be reached  
\*\*  
2nd:  
\*\*root@speedserver:~# dig [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org)

; \<\<\>\> DiG 9.11.3-1ubuntu1.5-Ubuntu \<\<\>\> [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org)  
;; global options: +cmd  
;; Got answer:  
;; -\>\>HEADER\<\<- opcode: QUERY, status: SERVFAIL, id: 52017  
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:  
; EDNS: version: 0, flags:; udp: 65494  
;; QUESTION SECTION:  
;[acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org). IN A

;; Query time: 2743 msec  
;; SERVER: 127.0.0.53#53(127.0.0.53)  
;; WHEN: Tue Mar 05 06:30:40 GMT 2019  
;; MSG SIZE rcvd: 57  
\*\*

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [March 5, 2019, 7:05am UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/11 "2019-03-05T07:05:41Z")

</div>

> [@lebasto7](#):
>
> ;; connection timed out; no servers could be reached

Your DNS resolver configuration on your server is broken. This prevents your server from making most outbound connections. (It doesn't prevent your server from receiving _inbound_ connections.) This could be because of a firewall or because your server is pointed at a DNS resolver that doesn't work or doesn't allow your server to use it.

---

<div class="post-metadata">

**Author:** ![lebasto7](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@lebasto7](https://community.letsencrypt.org/u/lebasto7)\
**Post date:** [March 5, 2019, 7:08am UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/12 "2019-03-05T07:08:27Z")

</div>

so i have to take back my server my server dns what i have to configure or what ??

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [March 5, 2019, 7:10am UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/13 "2019-03-05T07:10:15Z")

</div>

I’m not sure what the reason for the problem is because I don’t know anything about your server environment. Maybe you could take a look at the contents of `/etc/resolv.conf`?

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [March 5, 2019, 5:05pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/14 "2019-03-05T17:05:16Z")

</div>

Hi @lebasto7,

I would really like to suggest that you try French because in your most recent private message to me I found that you hadn’t understand the thing that I was asking you to do. I suspect that we have a pretty difficult language barrier here, and our forum does have a category for help in French (although most of the time only one person provides help in French, his help is excellent!).

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [March 6, 2019, 1:29am UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/15 "2019-03-06T01:29:40Z")

</div>

@tdelmas, do you think you could try to help in French here? I feel I’ve been having some difficulties in communicating with @lebasto7 about this server problem (the inability for the server itself to resolve DNS names).

---

<div class="post-metadata">

**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\
**Post date:** [March 6, 2019, 8:41am UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/16 "2019-03-06T08:41:11Z")

</div>

Bonjour @lebasto7  
Apparemment certbot n’arrive pas à joindre [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org) car il n’arrive pas à résoudre son nom avec DNS. D’où l’erreur “Name or service not known”.

Le diagnostique de @schoen est que le résolveur DNS de votre serveur est cassé. Avez-vous modifié sa configuration, par exemple, `/etc/resolv.conf`, ou une autre modification qui pourrait expliquer le problème?

---

<div class="post-metadata">

**Author:** ![lebasto7](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@lebasto7](https://community.letsencrypt.org/u/lebasto7)\
**Post date:** [March 6, 2019, 1:15pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/18 "2019-03-06T13:15:55Z")

</div>

# This file is managed by man:systemd-resolved(8). Do not edit.

# 

# This is a dynamic resolv.conf file for connecting local clients to the

# internal DNS stub resolver of systemd-resolved. This file lists all

# configured search domains.

# 

# Run “systemd-resolve --status” to see details about the uplink DNS servers

# currently in use.

# 

# Third party programs must not access this file directly, but only through the

# symlink at /etc/resolv.conf. To manage man:resolv.conf(5) in a different way,

# replace this symlink by a static file or a different symlink.

# 

# See man:systemd-resolved.service(8) for details about the supported modes of

# operation for /etc/resolv.conf.

nameserver 127.0.0.53  
options edns0

---

<div class="post-metadata">

**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\
**Post date:** [March 6, 2019, 4:50pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/19 "2019-03-06T16:50:40Z")

</div>

I’ve continue to help investigate: [Configuration du certificat pour mon server web](https://community.letsencrypt.org/t/configuration-du-certificat-pour-mon-server-web/87979/9?u=tdelmas)

The problem is definitively with the DNS resolver:  
`dig @8.8.8.8 acme-v02.api.letsencrypt.org` works  
`dig acme-v02.api.letsencrypt.org` doesn’t works  
`dig www.google.com` works  
Anybody have an idea how to investigate further ?

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [March 6, 2019, 5:24pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/20 "2019-03-06T17:24:04Z")

</div>

> [@tdelmas](#):
>
> `dig acme-v02.api.letsencrypt.org` doesn’t works

I see the ip address

```nohighlight
23.63.149.194

```

So the user can create a host entry

> [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org) 23.63.149.194

so the server has this ip address

PS: Somewhere in drivers/etc/host

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [March 6, 2019, 6:04pm UTC](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806/21 "2019-03-06T18:04:19Z")

</div>

> [@JuergenAuer](#):
>
> PS: Somewhere in drivers/etc/host

On Unix it's called `/etc/hosts`.

[Next page](https://community.letsencrypt.org/t/cetificat-wen-ubuntu-18-04-lts-server-speedtest/87806.md?page=2)
