HTTPSConnectionPool(host=‘acme-v02.api.letsencrypt.org’, port=443): Read timed out

Help
6

Yes, the server supports IPv6. Just to be sure I have deactivated it and now 'curl' reports:

  • Trying 172.65.32.248...
  • Connected to acme-v02.api.letsencrypt.org (172.65.32.248) port 443 (#0)
  • found 148 certificates in /etc/ssl/certs/ca-certificates.crt
  • found 592 certificates in /etc/ssl/certs
  • ALPN, offering http/1.1
  • SSL connection using TLS1.2 / ECDHE_RSA_AES_256_GCM_SHA384
  •    server certificate verification OK

  •    server certificate status verification SKIPPED

  •    common name: acme-v01.api.letsencrypt.org (matched)

  •    server certificate expiration date OK

  •    server certificate activation date OK

  •    certificate public key: RSA

  •    certificate version: #3

  •    subject: CN=acme-v01.api.letsencrypt.org

  •    start date: Sun, 12 Jan 2020 18:06:08 GMT

  •    expire date: Sat, 11 Apr 2020 18:06:08 GMT

  •    issuer: C=US,O=Let's Encrypt,CN=Let's Encrypt Authority X3

  •    compression: NULL
  • ALPN, server accepted to use http/1.1

GET /directory HTTP/1.1
Host: acme-v02.api.letsencrypt.org
User-Agent: curl/7.47.0
Accept: /

< HTTP/1.1 200 OK
< Server: nginx
< Date: Wed, 04 Mar 2020 09:33:11 GMT
< Content-Type: application/json
< Content-Length: 658
< Connection: keep-alive
< Cache-Control: public, max-age=0, no-cache
< X-Frame-Options: DENY
< Strict-Transport-Security: max-age=604800
<
{
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
"website": "https://letsencrypt.org"
},
"nG9MF72FHEU": "Adding random entries to the directory",
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"

Nevertheless the renewal still reports an error:

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Processing /etc/letsencrypt/renewal/irish-wolfhound-of-lough-ree.de.conf

Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Attempting to renew cert (irish-wolfhound-of-lough-ree.de) from /etc/letsencrypt/renewal/irish-wolfhound-of-lough-ree.de.conf produced an unexpected error: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Read timed out. (read timeout=45). Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/irish-wolfhound-of-lough-ree.de/fullchain.pem (failure)

All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/irish-wolfhound-of-lough-ree.de/fullchain.pem (failure)

1 renew failure(s), 0 parse failure(s)