Error by create cert with apache2 for Reverse Proxy

[GrafPAcula]

Hallo to the Forum,

i will use an Apache2 Server as an Reverse Proxy for my Exchange Server.

After i make the Apache Config, i will create an LE Cert.

Subdoamin: srv.domain.de -> static IP 80.xxx.xxx.xxx
A-Record: srv.domain.de
AAAA-Record -> Hoster
EX-Server: 192.xxx.xxx.xx

In the Apache2-Config:

• define FrontEndServerName srv.domain.de

• define FrondEndServerAlias srvdomain.de

• define FrontEndServerAdmin graf.pacula@domain.de

• define BackEndServerIP 192.xxx.xxx.xxx (Interne IP Exchange Server)

Create Zert: certbot --apache

It shows me:
Which names would you like to activate HTTPS for?

---

1: srv.domain.de

---

Select the appropriate numbers separated by commas and/or spaces, or leave input

blank to select all options shown (Enter 'c' to cancel):

I take "1". Then it shows me:

Waiting for verification...

Challenge failed for domain srv.domain.de

http-01 challenge for srv.domain.de

Cleaning up challenges

Some challenges have failed.

IMPORTANT NOTES:

• The following errors were reported by the server:

  Domain: srv.domain.de

  Type: connection

  Detail: 80.xxx.xxx.xxx: Fetching

  http://srv.domain.de/.well-known/acme-challenge/O7XGuV2c4NkgbSkWdewgwGynMrWoIkWgJlYLH6Kr7LY:

  Connection refused

  To fix these errors, please make sure that your domain name was

  entered correctly and the DNS A/AAAA record(s) for that domain

  contain(s) the right IP address. Additionally, please check that

  your computer has a publicly routable IP address and that no

PLEASE, HELP ME. Whats wrong?

Many thanks.

Frank

[9peppe]

@GrafPAcula

PLEASE, HELP ME. Whats wrong?

This:

@GrafPAcula

Connection refused

Are you sure that's the right IP address?

Have you checked any firewalls that might be in the way?

Have you checked your webserver on that machine, and its configuration? On port 80?

[rg305]

@GrafPAcula

PLEASE, HELP ME.

It is hard to help, when you don't show the true domain name.
Let's try answering all the questions you should have been shown:

---

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):