IP address firewall

[dejandu]

greeting,
Which IP address does LE access to certificate generating servers?
In my firewall all IP addresses are blocked except from Croatia, so I need an IP range to fire it on the firewall to generate the LE certificate.

I’m getting a Timeout during connect (likely firewall problem) error.

[_az]

There is no stable list of IP addresses: https://letsencrypt.org/docs/faq/#what-ip-addresses-does-let-s-encrypt-use-to-validate-my-web-server

If you don’t want your server to be open to the internet at large, then you should use the DNS-based challenge instead.

[tdelmas]

As @_az said, for incoming connections:

There is no stable list of IP addresses: FAQ - Let's Encrypt

For outgoing connections:

To use Let’s Encrypt, you need to allow outbound port 443 traffic from the machines running your ACME client. We don’t publish the IP ranges for our ACME service, and they will change without notice.

Integration Guide - Let's Encrypt

[schoen]

@tdelmas

To use Let’s Encrypt, you need to allow outbound port 443 traffic from the machines running your ACME client. We don’t publish the IP ranges for our ACME service, and they will change without notice.

These API endpoints are hosted by the Akamai CDN, and they can be different depending on where on the Internet you're accessing them from. Akamai can also change them over time according to its own criteria.