This is the first time I am trying to get a Let's Encrypt certificate. I am already struggling for quite some time. When I check immanuelcloud.nl - Make your website better - DNS, redirects, mixed content, certificates it reports something wrong for acme, but I can't figure out what. I have opened port 80 on my router to port 80 on the Synology, but that does not seem to work. Anybody can shine a light on it? Hugely appreciated!
My domain is: immanuelcloud.nl
I ran this command: Request for certificate with Synology DSM 6.2.4
For http://immanuelcloud.nl, which Let's Encrypt uses for an http-01 challenge, port 80 is unresponsive/closed. I eventually received a 504 Gateway Timeout response.
You can check this with:
For https://immanuelcloud.nl, which Let's Encrypt would use for an http-01 challenge if there were a proper http to https redirect in place, port 443 has a 302 Moved Temporarily forward to port 5001, which Let's Encrypt will not use for an http-01 challenge.
You can check this with:
Our implementation of the HTTP-01 challenge follows redirects, up to 10 redirects deep. It only accepts redirects to “http:” or “https:”, and only to ports 80 or 443. It does not accept redirects to IP addresses. When redirected to an HTTPS URL, it does not validate certificates (since this challenge is intended to bootstrap valid certificates, it may encounter self-signed or expired certificates along the way).
The HTTP-01 challenge can only be done on port 80. Allowing clients to specify arbitrary ports would make the challenge less secure, and so it is not allowed by the ACME standard.
