Error requesting certificate

My domain is:southbankyoga.co.uk (pings to 173.212.199.13 which is correct
Ubuntu Linux 20.04.3
certbot 0.40.0
Apache2
letsencrypt.txt (199.7 KB)

I can login to a root shell on my machine (yes or no, or I don't know):yes but can't run certbot
(certbot does not know how to configure this server etc - but it works fine using virtualmin)

Hi I am migrating sites to a new server and I have already moved 40 without a problem, I am using virtualmin to request the certificate.

When I tried to this site I got the error below

I ran this command: Virtualmin - add SSL from letsencrypt

It produced this output:Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
An unexpected error occurred:
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 159, in _new_conn
conn = connection.create_connection(
File "/usr/lib/python3/dist-packages/urllib3/util/connection.py", line 61, in create_connection
for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
File "/usr/lib/python3.8/socket.py", line 918, in getaddrinfo
for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -3] Temporary failure in name resolution

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 665, in urlopen
httplib_response = self._make_request(
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 376, in _make_request
self._validate_conn(conn)
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 996, in _validate_conn
conn.connect()
File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 314, in connect
conn = self._new_conn()
File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 171, in _new_conn
raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x7f9132186c10>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/requests/adapters.py", line 439, in send
resp = conn.urlopen(
File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 719, in urlopen
retries = retries.increment(
File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 436, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f9132186c10>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution'))

During handling of the above exception, another exception occurred:

requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f9132186c10>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution'))
Please see the logfiles in /var/log/letsencrypt for more details.

Many many thanks

Seems the DNS resolving capabilities of this server are inadequate.

2 Likes

Yes, it would seem so because I tried with another site which also failed with the same problem. This VPS has 40 sites and has worked fine up to now. So is there a limit?

This is not an error produced by the Let's Encrypt validation server, but by the client on your server. So I don't know why this happens? Can you retrieve the URL https://http://acme-v02.api.letsencrypt.org/directory through other clients such as curl or wget on that same host?

2 Likes

Thanks Osiris,

I run certbot on 4 other servers but I can't run it on this server, I get the error "certbot does not know how to configure this server"

yes I can
root@snoopy:~# wget https://acme-v02.api.letsencrypt.org/directory
--2022-02-16 13:57:59-- https://acme-v02.api.letsencrypt.org/directory
Resolving acme-v02.api.letsencrypt.org (acme-v02.api.letsencrypt.org)... 172.65.32.248, 2606:4700:60:0:f53d:5624:85c7:3a2c
Connecting to acme-v02.api.letsencrypt.org (acme-v02.api.letsencrypt.org)|172.65.32.248|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 658 [application/json]
Saving to: ‘directory’

directory 100%[========================================================================================================================================>] 658 --.-KB/s in 0s

2022-02-16 13:57:59 (31.6 MB/s) - ‘directory’ saved [658/658]

This error is usually transient, is it still there?

1 Like

All good - sorry for my impatience - I thought if ping worked..
Thanks you folks

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.