# I got a huge problem with CertBot

**URL:** <https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612>\
**Category:** Help\
**Created:** [May 27, 2021, 1:01pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612 "2021-05-27T13:01:42Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 1:01pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/1 "2021-05-27T13:01:42Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: [16Adrenaline.ddns.net](http://16Adrenaline.ddns.net)

I ran this command: Certbot certony --standalone

It produced this output: Says no IP addresses found for domain when my Apache is off.

My web server is (include version): Apache

The operating system my web server runs on is (include version):  
Windows 10

My hosting provider, if applicable, is:  
Rogers

I can login to a root shell on my machine (yes or no, or I don't know):  
I don't know  
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot):

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 27, 2021, 1:14pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/2 "2021-05-27T13:14:28Z")

</div>

Your hostname resolves to a private IP address:

```nohighlight
16Adrenaline.ddns.net.	60	IN	A	192.168.0.53

```

A few things:

1. Is it really necessary to use the `--standalone` plugin? As far as I know, the `--webroot` plugin also works on Windows (not sure about the `--apache` plugin though, can't find it in the documentation......)
2. The `--standalone` plugin (and the `--webroot` plugin too by the way) uses the `http-01` challenge, which requires a **publicly** available IP address to connect to by the Let's Encrypt validation server. If you don't or can't use a publicly available IP address, you could try to use the `dns-01` plugin.
3. "root" is the superuser on Linux/Unix systems, which would be "Administrator" rights on a Windows system.
4. You should know the answer to the control panel question and the client version question.
5. Please copy/paste the _entire_ output if requested, although for now we have enough information.

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 1:33pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/3 "2021-05-27T13:33:45Z")

</div>

But when I use the --webroot, I'm too stupid know what my site webroot is.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 27, 2021, 1:35pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/4 "2021-05-27T13:35:19Z")

</div>

It's the path configured by the `DocumentRoot` directive in Apache. But `standalone` or `webroot` isn't your biggest problem: if you want to use _either_ plugin, you need to fix the IP address first.

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 1:56pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/5 "2021-05-27T13:56:02Z")

</div>

so how do i fix the ip address?

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 27, 2021, 1:59pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/6 "2021-05-27T13:59:34Z")

</div>

It seems you're using no-ip's dynamic DNS system. I don't have experience with that, but you should somehow configure your dynamic DNS software to use the _public_ IP address of your internet connection in stead of the private IP address of the computer. Also, remember that port 80 and port 443 should be portmapped to your local computer in your NAT router, if applicable. And all firewalls need to be open for port 80 and 443.

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 2:27pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/7 "2021-05-27T14:27:14Z")

</div>

okay, i turned my firewall off. and what do i do for other thing you recommended?

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 27, 2021, 2:47pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/8 "2021-05-27T14:47:43Z")

</div>

> [@Swordfish](#):
>
> okay, i turned my firewall off.

I would not advice to turn the _entire_ firewall off.. Only ports 80 and 443 are required to be open.

> [@Swordfish](#):
>
> and what do i do for other thing you recommended?

I don't know, please check the documentation of the dynamic DNS software you're using for your [ddns.net](http://ddns.net) hostname.

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 2:53pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/9 "2021-05-27T14:53:21Z")

</div>

okay for my router i also tried turning my port forwarding to HTTP or HTTPS. i going to see if it works.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 27, 2021, 3:17pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/10 "2021-05-27T15:17:12Z")

</div>

As long as your hostname still resolves to your **private** IP address, it's not going to work.

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 3:24pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/11 "2021-05-27T15:24:41Z")

</div>

my router asks for my local. which is 192. but my public doesn't work.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 27, 2021, 3:26pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/12 "2021-05-27T15:26:49Z")

</div>

I don't understand. You're speaking about your router.. Are you talking about the port forwarding? Because I wasn't. I was talking about the DNS configuration of your hostname, as I specified in my first post in this thread.

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 3:27pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/13 "2021-05-27T15:27:55Z")

</div>

oh i was talking about port forwarding. thing is i dont even know what DNS configuration of hostname. does it have something to do with the config in apache.

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 3:28pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/14 "2021-05-27T15:28:45Z")

</div>

im starting off a few youtube videos, so i ask that you please be patient with me. the reason why I want an SSL is because I want to put Cloudflare or OVH on the site as a learning experience.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 27, 2021, 3:31pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/15 "2021-05-27T15:31:48Z")

</div>

> [@Swordfish](#):
>
> thing is i dont even know what DNS configuration of hostname.

Your hostname is `16adrenaline.ddns.net`. You somehow acquired that hostname, probably through [ddns.net](http://ddns.net) or perhaps [no-ip.com](http://no-ip.com). You need to change the DNS settings for your hostname somehow, perhaps through [ddns.net](http://ddns.net) or [no-ip.com](http://no-ip.com) too, I don't know.

> [@Swordfish](#):
>
> does it have something to do with the config in apache

No, Apache is a webserver. It does not do DNS things.

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 3:33pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/16 "2021-05-27T15:33:14Z")

</div>

i dont really see a problem on no [ip.com](http://ip.com) its the same ip as my local ip.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 27, 2021, 3:35pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/17 "2021-05-27T15:35:13Z")

</div>

> [@Swordfish](#):
>
> its the same ip as my local ip.

That _is_ the problem: it should show your _public_ IP address, not local.

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 3:35pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/18 "2021-05-27T15:35:50Z")

</div>

well thats really weird, my router wouldn't let me port forward my public ip tho.

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [May 27, 2021, 3:36pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/19 "2021-05-27T15:36:27Z")

</div>

But your router isn't [no-ip.com](http://no-ip.com)? Those are two different things? Or am I missing something?

---

<div class="post-metadata">

**Author:** ![Swordfish](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@Swordfish](https://community.letsencrypt.org/u/Swordfish)\
**Post date:** [May 27, 2021, 3:36pm UTC](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612/20 "2021-05-27T15:36:57Z")

</div>

wait am i only supposed to use no ip?

[Next page](https://community.letsencrypt.org/t/i-got-a-huge-problem-with-certbot/152612.md?page=2)
