Failed some CERT renew

Hi @bereich,

All of the common ports are CLOSED, including Port 80 (HTTP) & 443 (HTTPS)

Since you are using the HTTP-01 challenge, it states "The HTTP-01 challenge can only be done on port 80." and "It only accepts redirects to “http:” or “https:”, and only to ports 80 or 443." as well as "Our implementation of the HTTP-01 challenge follows redirects, up to 10 redirects deep."

Thus since there is the redirect to HTTPS both Ports 80 & 443 must be accessible.

Best Practice - Keep Port 80 Open

Edit

And from around the world:

Please see about GEO Blocking with Multi-Perspective Validation Improves Domain Validation Security - Let's Encrypt

And from Oregon, USA this is what I see

$ curl -Ii http://drive.mbreich.de/.well-known/acme-challenge/sometestfile
curl: (28) Failed to connect to drive.mbreich.de port 80 after 133583 ms: Connection timed out
$ nmap -Pn -p80,443 drive.mbreich.de
Starting Nmap 7.80 ( https://nmap.org ) at 2024-09-29 20:08 UTC
Nmap scan report for drive.mbreich.de (91.45.154.141)
Host is up.
rDNS record for 91.45.154.141: p5b2d9a8d.dip0.t-ipconnect.de

PORT    STATE    SERVICE
80/tcp  filtered http
443/tcp filtered https

Nmap done: 1 IP address (1 host up) scanned in 3.98 seconds
4 Likes