Challenge failed for domain (nginx)

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: eservices.deyaprevezas.gr

I ran this command: certbot -v --nginx

It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Certbot has detected that nginx version < 1.13.0 or compiled against openssl < 1.0.2l. Since these are deprecated, the configuration file being installed at /etc/letsencrypt/options-ssl-nginx.conf will not receive future updates. To get the latest configuration version, update nginx.
Plugins selected: Authenticator nginx, Installer nginx

Which names would you like to activate HTTPS for?
We recommend selecting either all domains, or all domains in a VirtualHost/server block.

1: eservices.deyaprevezas.gr

Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): 1

An RSA certificate named eservices.deyaprevezas.gr already exists. Do you want
to update its key type to ECDSA?

(U)pdate key type/(K)eep existing key type: U
Renewing an existing certificate for eservices.deyaprevezas.gr
Performing the following challenges:
http-01 challenge for Identifier(typ=IdentifierType(dns), value='eservices.deyaprevezas.gr')
Waiting for verification...
Challenge failed for domain eservices.deyaprevezas.gr
http-01 challenge for Identifier(typ=IdentifierType(dns), value='eservices.deyaprevezas.gr')

Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Identifier: eservices.deyaprevezas.gr
Type: connection
Detail: 85.72.141.18: Fetching http://eservices.deyaprevezas.gr/.well-known/acme-challenge/0OjBafCf5UpdYJebpGe-JJgH2zl0HcAMclSakMqJ248: Timeout during connect (likely firewall problem)

My web server is (include version): nginx/1.26.1

The operating system my web server runs on is (include version): Oracle Linux Server 7.9

My hosting provider, if applicable, is: On premises

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 5.3.1

NOTES

  • The web site is working using the certificate created by certbot-auto.
  • certbot-auto was removed and replaced by certbot 5.3.1.
  • The certbot challenge does not appear at nginx logs.
  • I manualy modified the nginx configuration (according to /var/log/letsencrypt/letsencrypt.log) and I got the challenge response at my web browser.
2

Is 85.72.141.18 still your server's IP address and have you allowed/forwarded TCP port 80 (HTTP)?

1 Like
3

Yes.
You can open this site. Is is active.
The site is working with the old certificate produced by certbot-auto.

Thank you,
Pascalis

4

I cannot access your website, is there any geographic blocking?

5

Please verify that you cannot access https://eservices.deyaprevezas.gr
Μaybe this is the cause of the problem.
Perhaps the internet provider blocks the access.

Thank you,
Pascalis

2 Likes
6

I cannot access http://eservices.deyaprevezas.gr nor can I access https://eservices.deyaprevezas.gr/ from the U.K.

1 Like
7

Thank you MaxHearnden.
I believe Internet provider or a firewall blocks access.
Please send me the IP address you get for eservices.deyaprevezas.gr from nslookup.

Pascalis.

8

I'm getting 85.72.141.18 as the address for eservices.deyaprevezas.gr, there is currently no IPv6 address listed.

9

I also get 85.72.141.18 and it's completely down from here within Europe.

1 Like
10

Maybe. But, not many locations are working per this site: Check website performance and response : Check host - online website monitoring

Does it work for you from the public internet? Like a mobile phone with wifi disabled?

3 Likes
11

Thank you all,

You were very helpful .

Pascalis