Failed to connect to x.x.x.x:443 for TLS-SNI-01 not able to setup certificate

This is the two files for my apache conf file please check it

Once checked please let me know will remove the link

Possibly stupid question: is mod_ssl installed and enabled? You can install it using yum install mod_ssl or check if it’s enabled via httpd -M.

hello it’s already installed and i have installed the certificate also
Could you please see below

[root@ip-172-31-19-172 ~]# yum list mod_ssl
Loaded plugins: priorities, update-motd, upgrade-helper
Installed Packages
mod_ssl.x86_64 1:2.2.31-1.8.amzn1 @amzn-main
[root@ip-172-31-19-172 ~]# httpd -M | grep ssl
Syntax OK

I have already told first I have installed certificate for main domain , but am not able to setup for sub domains at the time only i got error

The important bit is what’s on the server right now, not previously. Just to clarify: You currently have no domains/other vhosts on this server that work via HTTPS, correct?

Anyhow, the mod_ssl situation looks fine. I don’t see anything in the two config files you shared that would cause this. Are there any other files containing vhosts, and what are their contents? grep -r VirtualHost /etc/httpd should do.

Yes I have other files.
check the following file for ssl configuartion part i have done for same thing other domains also.

I need to setup ssl cert atleast any one of the domain probably

For all other vhosts that are for port 443, can you verify that each of them contains SSLEngine On? For the file you posted, this is probably done via Include /etc/letsencrypt/options-ssl-apache.conf, which should contain that line, but if you have any other vhosts on port 443 that do not include that directive, this could be causing what you're seeing here.

If that's not the issue, take a look at this post:

My opinion is letsencrypt has been blocked my server IP trying to verify while creating the ssl certificate. acme-v01.api.letsencrypt.org

Just now am tring to create certifictae with only one domain i got below error.

Command i have executed
./letsencrypt-auto --apache -d www.bezirk.com

Failed authorization procedure. www.bezirk.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Failed to connect to 54.218.126.252:443 for TLS-SNI-01 challenge

This above problem I am getting you people telling configuration part I think there is no configuration error in apache level.

Ok i will check let you know

I have installed the certificate for www.bezirk.com bu am not able to setup for sub domains.

I have executed letsencrypt-auto --debug and successfully installed but not works for sub doamins.

IMPORTANT NOTES:

  • We were unable to set up enhancement redirect for your server,
    however, we successfully installed your certificate.
  • Congratulations! Your certificate and chain have been saved at
    /etc/letsencrypt/live/developer.bezirk.io/fullchain.pem. Your cert
    will expire on 2017-02-23. To obtain a new or tweaked version of
    this certificate in the future, simply run letsencrypt-auto again
    with the “certonly” option. To non-interactively renew all of
    your certificates, run “letsencrypt-auto renew”

Hi,
I have installed the certificates for all the domain.
But i having problem with sub domains it’s redirecting to default apache page the main site working properly

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.