Directadmin custombuild 2.0 with nignx reversed proxy

Help
1

My domain is:

I ran this command:
I use the directadmin gui with letsencrypt

It produced this output:
Cannot Execute Your Request

Details

Getting challenge for loonbedrijfsteinbusch.nl from acme-server…
Waiting for domain verification…
Challenge is invalid. Details: Fetching http://loonbedrijfsteinbusch.nl/.well-known/acme-challenge/ITBofHfZ5nG0tEVlArnp2gSZbpqLO0KO-cIUdyiOhXM: Timeout. Exiti

My web server is (include version):
CentOS 7 with directadmin custombuild 2.0 and nginx reversed proxy

The operating system my web server runs on is (include version):
CentOS7 VPS

My hosting provider, if applicable, is:
TransIP

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): directadmin custombuild 2.0

2

Hi @NOID,

You have IPv4 and IPv6 records for your domain

$ dig loonbedrijfsteinbusch.nl +short
149.210.228.50

$ dig loonbedrijfsteinbusch.nl aaaa +short
2a02:2770::21a:4aff:fe15:c69

But your site is only reachable using IPv4

$ curl -IkL4 http://loonbedrijfsteinbusch.nl/.well-known/acme-challenge/test
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 29 Sep 2017 08:15:42 GMT
Content-Type: text/html; charset=iso-8859-1
Connection: keep-alive
Vary: Accept-Encoding

$ curl -IkL6 http://loonbedrijfsteinbusch.nl/.well-known/acme-challenge/test
curl: (7) Failed to connect to loonbedrijfsteinbusch.nl port 80: Connection timed out

As Let's Encrypt prefers IPv6 over IPv4, it is trying to validate your domain using your IPv6 address and it receives a timeout.

Solution: Remove the AAAA record for your domain/domains or configure your site correctly to answer IPv6 requests.

Good luck,
sahsanu

3

Thanks! This helps me :slight_smile:

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.