Invalid DNS gusnas.us requested from cloudflare

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:gusnas.us

I ran this command:certbot -v certonly

It produced this output: ValueError: Requesting acme-v02.api.letsencrypt.or/directory: Netwotk is unreacheable

My web server is (include version):Apache/2.4.62 (Debian) Server built: 2024-10-04T15:21:08

The operating system my web server runs on is (include version):proxmox running debian bookworm

My hosting provider, if applicable, is: xfinity isp

I can login to a root shell on my machine (yes or no, or I don't know):yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):terminal tty

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):certbot 2.1.0

2

This indicates a pretty serious network problem between your server, wherever it is, and Let's Encrypt. You'll need to fix that in order to get a certificate.

3 Likes
4

I can nmap 172.65.32.248. However port 443 on your server is not reported as open.

5

Let's check your network connectivity. The IP for acme-v02.api.letsencrypt.org is 172.65.32.248 (today).

There is a range of private IP addresses that start with 172. But, that should only be for the range 172.16.0.0/12.

If you setup your local network (wrongly) to use, say, 172.0.0.0/8 that declares a wider range of IP addresses as private. Your local network won't then route requests for these extra IP to the public internet. The acme-v02 IP is between /8 and /12 so you won't be able to reach it.

Would you show output of these

sudo traceroute -T -p 443 acme-v02.api.letsencrypt.org

curl https://www.cloudflare.com/cdn-cgi/trace

curl -I https://google.com

And, output of this if you have it

netstat -nr
3 Likes
6

Thanks for engaging my difficulty. I was unsuccessful getting the netstat command to yield any information, however the others ran and gave the information in the attached file.

(Attachment output_file.bin is missing)

7

The other info would be helpful. But, attached to the email did not post it. A .bin is not a supported format for upload to this forum. Would be best if you could copy/paste the results. Or, try the "upload" button on the forum itself (not via email) to see supported file types.

2 Likes