Get https://acme-v01.api.letsencrypt.org/directory: ...: read: connection refused

Hello,

My domain is: https:chilango.me

I ran this command: docker-compose up

It produced this output:
traefik_1 | time=“2017-08-25T15:41:18+02:00” level=error msg="Error creating TLS config: get directory at ‘https://acme-v01.api.letsencrypt.org/directory’: failed to get json “https://acme-v01.api.letsencrypt.org/directory”: Get https://acme-v01.api.letsencrypt.org/directory: dial tcp: lookup acme-v01.api.letsencrypt.org on 127.0.0.11:53: read udp 127.0.0.1:54642->127.0.0.11:53: read: connection refused"
traefik_1 | time=“2017-08-25T15:41:18+02:00” level=fatal msg=“Error preparing server: get directory at ‘https://acme-v01.api.letsencrypt.org/directory’: failed to get json “https://acme-v01.api.letsencrypt.org/directory”: Get https://acme-v01.api.letsencrypt.org/directory: dial tcp: lookup acme-v01.api.letsencrypt.org on 127.0.0.11:53: read udp 127.0.0.1:54642->127.0.0.11:53: read: connection refused”

My web server is (include version):

The operating system my web server runs on is (include version):
4.4.0-83-generic (Linux)

My hosting provider, if applicable, is: Hertz

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

my toeml:

# https://docs.traefik.io/toml/

# Accepted values, in order of severity: "DEBUG", "INFO", "WARN", "ERROR", "FATAL", "PANIC"
# debug = true
# logLevel = "DEBUG"

defaultEntryPoints = ["http", "https"]

[web]
address = ":8080"
  # authendication traefik admin interface
  # https://docs.traefik.io/toml/#api-backend
  # htpasswd -nb username password
  [web.auth.basic]
  users = ["xx ;-)"]

[docker]
domain = "chilango.me"
watch = true

[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
    entryPoint = "https"
  [entryPoints.https]
  address = ":443"
    [entryPoints.https.tls]

# https://docs.traefik.io/toml/#acme-lets-encrypt-configuration
[acme]
email = "xxxx ;-)"
storage = "acme/acme.json"
entryPoint = "https"
OnHostRule = true
acmeLogging = true

Hi @Schmaddin,

I'm not familiar with Traefik and my docker-fu is quite weak but this looks to me like the container is trying to perform a DNS lookup by talking to a stub resolver at 127.0.0.11 on port 53 but the connection is refused. Since the DNS lookup for the Let's Encrypt ACME server fails nothing will work.

I'm not sure what to suggest in terms of troubleshooting/debugging. Perhaps if you open an issue with the Traefik developers they could make more concrete suggestions?

Hope that helps!

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.