My domain is: git.sdxlive.com which is dual-stacked & accessible at: 90.127.230.116 2a01:cb00:745:c100:ba70:f4ff:fea8:f25c I ran this command: https://[2a01:cb00:745:c100:ba70:f4ff:fea8:f25c]/ It produced this output: Your connection is not private My web server is (include version): nginx 1.15…

Hi @jean-christophe-manc [image] jean-christophe-manc: I ran this command: https://[2a01:cb00:745:c100:ba70:f4ff:fea8:f25c]/ It produced this output: Your connection is not private it is not possible to change that. You have a certificate with domain names. But that doesn't work with your i…

I have restricted on purpose the protocol to TLS 1.3 which may be an issue for https://check-your-website.server-daten.de if their system does not support that latest version. I get different results with https://www.ssllabs.com/ssltest/analyze.html?d=git.sdxlive.com&s=90.127.230.116 where https is…

[image] jean-christophe-manc: the certificate I received from let’s encrypt is supposed to support both IPv4 & IPv6, right? Yes, certificates aren't restricted in that way. I see a problem, maybe with the firewall: curl -Iki6 http://git.sdxlive.com/ curl: (7) Failed to connect to git.sdxli…

[image] jean-christophe-manc: I have restricted on purpose the protocol to TLS 1.3 That's bad. My tool doesn't support Tls.1.3. Tls.1.2 is the standard, so you should allow Tls.1.2 connections. But this isn't the problem. Ipv6 has timeouts. So your server doesn't answer. It's not relevant …

I have enabled TLS 1.2. Could you try again? Regarding IPv6, AFAIK, the firewall does not filter 80/443 ports but I will ask my provider.

[image] jean-christophe-manc: Could you try again? The tool is online. You can use it. I've created it because of the questions in this forum. To make it easier to check such configurations with different ip addresses etc. So I don't have to use a lot of different tools (dns-tools, browser e…

PS: It’s the same - ipv4 works now complete, ipv6 has timeouts. Domainname Http-Status redirect Sec. G • http://git.sdxlive.com/ 90.127.230.116 301 https://git.sdxlive.com/ 0.077 A • http://git.sdxlive.com/ 2a01:cb00:745:c100:ba70:f4ff:fea8:f25c -14 10.027 T Timeou…

This issue has been solved: it was a IPv6 firewall issue indeed. Now, the server is accessible on both IPv4 & IPv6: [SSL%20report] Thanks for your help.

[image] jean-christophe-manc: Now, the server is accessible on both IPv4 & IPv6: Not complete, only https: Domainname Http-Status redirect Sec. G • http://git.sdxlive.com/ 90.127.230.116 301 https://git.sdxlive.com/ 0.077 A • http://git.sdxlive.com/ 2a01:cb00:745…

How to get a certificate for IPv4 AND IPv6

Help

Topic		Replies	Views
IPv4 used instead of IPv6 Help	9	1161	December 29, 2023
Net::err_cert_date_invalid Help	31	920	June 17, 2023
Invalid response from https:// Help	5	540	December 6, 2020
Suddenly cert problem Help	25	4940	December 5, 2019
After running certbot the connection is over IPv4 instead of IPv6 Server	5	1098	November 16, 2018

How to get a certificate for IPv4 AND IPv6

Related topics