Error al generar certificado

#1

hola, me podrian decir porque salen estos errores al generar un cefrtificado??

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator standalone, Installer None
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for XXXXXXX
Waiting for verification…
Challenge failed for domain XXXXXXXXXXXXXX
http-01 challenge for XXXXXXXXXXXXX
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: XXXXXXXXXXX
    Type: connection
    Detail: Fetching
    http://XXXXXXXX/.well-known/acme-challenge/s4HhOsJu27UZ9WvPGmO8LfQpxs7yznzBoYYFIo5bBFU:
    Timeout during connect (likely firewall problem)

    To fix these errors, please make sure that your domain name was
    entered correctly and the DNS A/AAAA record(s) for that domain
    contain(s) the right IP address. Additionally, please check that
    your computer has a publicly routable IP address and that no
    firewalls are preventing the server from communicating with the
    client. If you’re using the webroot plugin, you should also verify
    that you are serving files from the webroot path you provided.

.
que puede ser esto nunca me habia salido…

#2

Hi @Gily

hiding your domain name doesn’t help. There are a lot of problems only visible if it is possible to check your domain.


Please answer the following questions:

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

#3

Hola @Gily,

Como @JuergenAuer dijó, no podemos ayudarle sin saber su nombre de dominio.

Lo más probable es que tenga un firewall o router bloqueando puerto 80. En el pasado la verificación (por ejemplo con --standalone) usaba puerto 443, pero ahora tiene que usar puerto 80.