DVSNI challenge on Ubuntu 14

Issuance Tech
1

Hello,

I am unable to Pass the DVSNI challenge.

I had a SSL certificate installed and have since removed this expired cert from my server (Ubuntu 14.04.03 /Apache2). I am now trying to use LE to install a new cert for www. mydomain . com(spaces added for new user link limit) and or mydomain.com using:

sudo ./letsencrypt-auto --verbose --apache -d www.mydomain.org

I am :getting the following error:
`Failed authorization procedure. www.mydomain.org (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Failed to connect to host for DVSNI challenge

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: www.mydomain.org
    Type: connection
    Detail: Failed to connect to host for DVSNI challenge

    To fix these errors, please make sure that your domain name was
    entered correctly and the DNS A record(s) for that domain
    contain(s) the right IP address. Additionally, please check that
    your computer has a publicly routable IP address and that no
    firewalls are preventing the server from communicating with the
    client. If you’re using the webroot plugin, you should also verify
    that you are serving files from the webroot path you provided.`

I am sitting behind a an ASA5510. With all the appropriate access lists enabling 443 and 80 access both from within the network and out.

Any help would be greatly appreciated.

EDIT------------------------------

I was able to use the following command to create the cert then change the configuration on my site.conf file to point the the PEMs created.

sudo ./letsencrypt-auto certonly --standalone -d www.mywebsite.org

`SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/mywebsite.org/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/mywebsite.org/privkey.pem

<Directory “/var/www/html/mywebsite.org”>
SSLRequireSSL
`

2

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.