Domen help active

Help
#1

I took the site and won't help to get a certificate already evil as hell!

ihor.ru hosting
I found Let`s Encrypt there, but I can't get an active certificate

site:
http://rashodnik.cv.ua

1 Like
#2

Hi @seroff, welcome to the LE community forum :slight_smile:

Your site has IPv4 and IPv6 address in DNS.

Name:      rashodnik.cv.ua
Addresses: 2a0a:9300::abcd
           5.252.116.9

And LE prefers the IPv6 address when present.

But the IPv6 address does not respond to HTTP requests:

curl -I6 rashodnik.cv.ua
curl: (56) Recv failure: Connection reset by peer

Before you continue testing...
You should fix the IPv6 HTTP problem.
OR
Remove the IPv6 (AAAA) record from your DNS.

And use the --staging environment until all tests are passed before using the production environment.

2 Likes
#3

I don't understand a little what should I do?

1 Like
#4

You need a fully functional HTTP site before you try to secure it.

The site only works for IPv4 connections.
But the site has IPv4 and IPv6 addresses
The IPv6 address does NOT work.

Either fix it or remove it.

2 Likes
#5

The admins say that Let`s Encrypt decide everything themselves, but I don't understand this at all, I want it to just work!

Ihor.ru host = https://rashodnik.cv.ua

1 Like
#6

Tell the admins that your site doesn't work via IPv6:

Name:      rashodnik.cv.ua
Addresses: 2a0a:9300::abcd
           5.252.116.9

This works:

curl -I4 rashodnik.cv.ua
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 23 Aug 2021 14:47:49 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
X-Powered-By: PHP/7.4.21
Set-Cookie: OCSESSID=4df253ec76a7788275952b337b; path=/
Set-Cookie: language=ru-ru; expires=Wed, 22-Sep-2021 14:47:49 GMT; Max-Age=2592000; path=/; domain=rashodnik.cv.ua
Set-Cookie: currency=UAN; expires=Wed, 22-Sep-2021 14:47:49 GMT; Max-Age=2592000; path=/; domain=rashodnik

This doesn't work:

curl -I6 rashodnik.cv.ua
curl: (56) Recv failure: Connection reset by peer
3 Likes
#7

go next 2022?

#8

What ?

#9

21.11.21 go next to 2022?

#10

Three certificates were issued today (you only needed one).
crt.sh | rashodnik.cv.ua
They each last 90 days and will all expire on 2021.11.21
If you wish to continue secure, you will need to renew the cert before it expires.

2 Likes
#11

IPv6 continues to fail:
SSL Server Test: rashodnik.cv.ua (Powered by Qualys SSL Labs)

2 Likes
#12

What ?

#13

Is there a language/translation problem?
I speak with complete sentences.
How do you not understand me?

2 Likes
#14

I am just Russian

1 Like
#15

That should not be a problem.
Are you still having a problem?
Or did you get your cert and all is OK now?

2 Likes
#16

Site for ip-v6 won't work?

1 Like
#17

No it doesn't work.
See link: SSL Server Test: rashodnik.cv.ua (Powered by Qualys SSL Labs)

2 Likes
#18

From the server, please show the outputs of:
curl -I4 ifconfig.co
curl -I6 ifconfig.co

2 Likes
#19

me web-host ihor.ru not server

#20

If you can log in to the web-host, then show the outputs of:
curl -I4 ifconfig.co
curl -I6 ifconfig.co

2 Likes