Getting a certificate: Connection Refused

Help
#1

Please fill out the fields below so we can help you better.
My domain is: peterson.barrett.com.au

I ran this command:certbot-auto --apache certonly

It produced this output:Failed authorization procedure. dmz.barrett.com.au (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Connection refused, peterson.barrett.com.au (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Connection refused

My web server is (include version):2.2.15-60.el6.centos.5

The operating system my web server runs on is (include version):CentOS 6.9

I can login to a root shell on my machine (yes or no, or I don’t know):Yes

I have a laptop that uses a USB modem to get an Internet Connection. Using the laptop I can use Firefox and the URL http://peterson.barrett.com.au to see the webserver working.

Now what’s not clear is “certbot-auto” testing the https connection as well? Well if it does it will fail because there is no certificate, this is what I am trying to fetch!

I have a few letsencrypt certs, never had a problem like this.
No clue what’s wrong.

Help please!

Jobst

#2

the apache client should create the SSL binding and configuration for you.

there is a debug challenges option which you can use this to figure things out

–debug-challenges After setting up challenges, wait for user input
before submitting to CA (default: False)

Try the following

certbot-auto --apache

Andrei

Failed authorization procedure. www.hotelivate.com (tls-sni-01)
#3

I only used “certonly” because I thought this stops certbot-auto to restart apache …

When executing the command: “certbot-auto --apache” it still comes up with the problem “Connection refused”, is there a way to debug that?

#4

if you use the --debug-challenges flag you can confirm that the self signed certificate is created and applied to apache

#5

more information on how to use this:

Andrei

#6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.