Check if IP is blocked HTTPSConnectionPool(host=‘acme-v02.api.letsencrypt.org’, port=443):

Help
1

Hello, I have proble when I run command sudo certbot certonly --standalone

I'm getting:
requests.exceptions.SSLError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by SSLError(SSLEOFError(8, 'EOF occurred in violation of protocol (_ssl.c:1131)')))
Ask for help or search for solutions at https://community.letsencrypt.org.

I read a forum and looks like my IP is blocked (193.111.124.221)

openssl s_client -connect acme-v02.api.letsencrypt.org:443

Certify, Openssl and certbot (LAST VERSIONS)
OS Ubuntu 18.04

2

Hi @fits-bandung Welcome to the community!
When you opened this thread you were presented a questionnaire to provide volunteers here with enough information to help.

Someone may already know what the error you received means, but more information would certainly help.

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version): Ubuntu 18.04

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

4 Likes
3

Might be although this is fairly rare. Can you show result of both of these

echo | openssl s_client -connect acme-v02.api.letsencrypt.org:443 | head

echo | openssl s_client -connect cloudflare.com:443 | head
5 Likes
4

echo | openssl s_client -connect acme-v02.api.letsencrypt.org:443 | head

write:errno=0
CONNECTED(00000005)
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 330 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)

echo | openssl s_client -connect cloudflare.com:443 | head

write:errno=0
CONNECTED(00000005)
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 316 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
5

My domain is: citere.fujicon.id

I ran this command: sudo certbot --nginx

It produced this output:

An unexpected error occurred:
requests.exceptions.SSLError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by SSLError(SSLEOFError(8, 'EOF occurred in violation of protocol (_ssl.c:1131)')))
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version): nginx version: nginx/1.14.0 (Ubuntu)

The operating system my web server runs on is (include version): Ubuntu 18.04

My hosting provider, if applicable, is:
I can login to a root shell on my machine YES

I’m using a control panel to manage my site : proxmox

Version my client is : certbot 2.6.0

1 Like
6

don't think you can connect to cloudflare at all: curl https://cloudflare.com ?

4 Likes
7

You are not being blocked by Let's Encrypt. It looks like you might have a firewall blocking all outbound connections or some other comms config problem.

What do these show?

curl -I http://google.com

curl -I https://google.com
5 Likes
8

Both of those are hosted by Cloudflare.
Try connecting to somewhere else:

4 Likes
9

Here is what I see from my location:
A few minutes ago:

22/tcp  open	 ssh
53/tcp  open	 domain
80/tcp  open	 http
110/tcp open	 pop3
143/tcp open	 imap

And I could access the site via http AND https (would not show cert info)

web-site

gtm
gtm1333×464 56.9 KB

Just Now:

22/tcp  filtered ssh
53/tcp  filtered domain
80/tcp  filtered http
110/tcp filtered pop3
143/tcp filtered imap

And the website is offline...
FYI

3 Likes
10

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.