Domen help active

I took the site and won't help to get a certificate already evil as hell!

ihor.ru hosting
I found Let`s Encrypt there, but I can't get an active certificate

site:
http://rashodnik.cv.ua

1 Like

Hi @seroff, welcome to the LE community forum :slight_smile:

Your site has IPv4 and IPv6 address in DNS.

Name:      rashodnik.cv.ua
Addresses: 2a0a:9300::abcd
           5.252.116.9

And LE prefers the IPv6 address when present.

But the IPv6 address does not respond to HTTP requests:

curl -I6 rashodnik.cv.ua
curl: (56) Recv failure: Connection reset by peer

Before you continue testing...
You should fix the IPv6 HTTP problem.
OR
Remove the IPv6 (AAAA) record from your DNS.

And use the --staging environment until all tests are passed before using the production environment.

2 Likes

I don't understand a little what should I do?

1 Like

You need a fully functional HTTP site before you try to secure it.

The site only works for IPv4 connections.
But the site has IPv4 and IPv6 addresses
The IPv6 address does NOT work.

Either fix it or remove it.

2 Likes

The admins say that Let`s Encrypt decide everything themselves, but I don't understand this at all, I want it to just work!

Ihor.ru host = https://rashodnik.cv.ua

1 Like

Tell the admins that your site doesn't work via IPv6:

Name:      rashodnik.cv.ua
Addresses: 2a0a:9300::abcd
           5.252.116.9

This works:

curl -I4 rashodnik.cv.ua
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 23 Aug 2021 14:47:49 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
X-Powered-By: PHP/7.4.21
Set-Cookie: OCSESSID=4df253ec76a7788275952b337b; path=/
Set-Cookie: language=ru-ru; expires=Wed, 22-Sep-2021 14:47:49 GMT; Max-Age=2592000; path=/; domain=rashodnik.cv.ua
Set-Cookie: currency=UAN; expires=Wed, 22-Sep-2021 14:47:49 GMT; Max-Age=2592000; path=/; domain=rashodnik

This doesn't work:

curl -I6 rashodnik.cv.ua
curl: (56) Recv failure: Connection reset by peer
3 Likes

go next 2022?

What ?

21.11.21 go next to 2022?

Three certificates were issued today (you only needed one).
crt.sh | rashodnik.cv.ua
They each last 90 days and will all expire on 2021.11.21
If you wish to continue secure, you will need to renew the cert before it expires.

2 Likes

IPv6 continues to fail:
SSL Server Test: rashodnik.cv.ua (Powered by Qualys SSL Labs)

2 Likes

What ?

Is there a language/translation problem?
I speak with complete sentences.
How do you not understand me?

2 Likes

I am just Russian

1 Like

That should not be a problem.
Are you still having a problem?
Or did you get your cert and all is OK now?

2 Likes

Site for ip-v6 won't work?

1 Like

No it doesn't work.
See link: SSL Server Test: rashodnik.cv.ua (Powered by Qualys SSL Labs)

2 Likes

From the server, please show the outputs of:
curl -I4 ifconfig.co
curl -I6 ifconfig.co

2 Likes

me web-host ihor.ru not server

If you can log in to the web-host, then show the outputs of:
curl -I4 ifconfig.co
curl -I6 ifconfig.co

2 Likes