Domain: cloud.ihasamoose.ca
Context: I had an apache server running, but I accidentally blew it up, so I wiped and reformatted. Everything is peachy, except I can’t run let’s encrypt. Here is the error I’m getting:
Summary
Running letsencrypt
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for cloud.ihasamoose.ca
Using the webroot path /var/www/nextcloud for all unmatched domains.
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. cloud.ihasamoose.ca (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://cloud.ihasamoose.ca/.well-known/acme-challenge/TmTb-Chp1U-06y07E211zxmas80W25ed8hGsIypNUZY: Timeout during connect (likely firewall problem)
IMPORTANT NOTES:
-
The following errors were reported by the server:
Domain: cloud.ihasamoose.ca
Type: connection
Detail: Fetching
http://cloud.ihasamoose.ca/.well-known/acme-challenge/TmTb-Chp1U-06y07E211zxmas80W25ed8hGsIypNUZY:
Timeout during connect (likely firewall problem)To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address. Additionally, please check that
your computer has a publicly routable IP address and that no
firewalls are preventing the server from communicating with the
client. If you’re using the webroot plugin, you should also verify
that you are serving files from the webroot path you provided.
Done. Press any key…
Here’s lets encrypt error log:
Summary
sudo tail -n 50 /var/log/letsencrypt/letsencrypt.log
}
]
}
]
}
2020-02-03 21:24:00,671:DEBUG:acme.client:Storing nonce: 0102CZ3PfWEFZs2BPTBlrd2z96N7nyg8pew1SODk8SUFLzQ
2020-02-03 21:24:00,674:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:
Domain: cloud.ihasamoose.ca
Type: connection
Detail: Fetching http://cloud.ihasamoose.ca/.well-known/acme-challenge/TmTb-Chp1U-06y07E211zxmas80W25ed8hGsIypNUZY: Timeout during connect (likely firewall problem)
To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you’re using the webroot plugin, you should also verify that you are serving files from the webroot path you provided.
2020-02-03 21:24:00,677:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/certbot/auth_handler.py”, line 82, in handle_authorizations
self._respond(aauthzrs, resp, best_effort)
File “/usr/lib/python3/dist-packages/certbot/auth_handler.py”, line 168, in _respond
self._poll_challenges(aauthzrs, chall_update, best_effort)
File “/usr/lib/python3/dist-packages/certbot/auth_handler.py”, line 239, in _poll_challenges
raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. cloud.ihasamoose.ca (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://cloud.ihasamoose.ca/.well-known/acme-challenge/TmTb-Chp1U-06y07E211zxmas80W25ed8hGsIypNUZY: Timeout during connect (likely firewall problem)
2020-02-03 21:24:00,677:DEBUG:certbot.error_handler:Calling registered functions
2020-02-03 21:24:00,678:INFO:certbot.auth_handler:Cleaning up challenges
2020-02-03 21:24:00,678:DEBUG:certbot.plugins.webroot:Removing /var/www/nextcloud/.well-known/acme-challenge/TmTb-Chp1U-06y07E211zxmas80W25ed8hGsIypNUZY
2020-02-03 21:24:00,680:DEBUG:certbot.plugins.webroot:All challenges cleaned up
2020-02-03 21:24:00,681:DEBUG:certbot.log:Exiting abnormally:
Traceback (most recent call last):
File “/usr/bin/letsencrypt”, line 11, in
load_entry_point(‘certbot==0.31.0’, ‘console_scripts’, ‘certbot’)()
File “/usr/lib/python3/dist-packages/certbot/main.py”, line 1365, in main
return config.func(config, plugins)
File “/usr/lib/python3/dist-packages/certbot/main.py”, line 1250, in certonly
lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
File “/usr/lib/python3/dist-packages/certbot/main.py”, line 121, in _get_and_save_cert
lineage = le_client.obtain_and_enroll_certificate(domains, certname)
File “/usr/lib/python3/dist-packages/certbot/client.py”, line 410, in obtain_and_enroll_certificate
cert, chain, key, _ = self.obtain_certificate(domains)
File “/usr/lib/python3/dist-packages/certbot/client.py”, line 353, in obtain_certificate
orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
File “/usr/lib/python3/dist-packages/certbot/client.py”, line 389, in _get_order_and_authorizations
authzr = self.auth_handler.handle_authorizations(orderr, best_effort)
File “/usr/lib/python3/dist-packages/certbot/auth_handler.py”, line 82, in handle_authorizations
self._respond(aauthzrs, resp, best_effort)
File “/usr/lib/python3/dist-packages/certbot/auth_handler.py”, line 168, in _respond
self._poll_challenges(aauthzrs, chall_update, best_effort)
File “/usr/lib/python3/dist-packages/certbot/auth_handler.py”, line 239, in _poll_challenges
raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. cloud.ihasamoose.ca (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://cloud.ihasamoose.ca/.well-known/acme-challenge/TmTb-Chp1U-06y07E211zxmas80W25ed8hGsIypNUZY: Timeout during connect (likely firewall problem)
My ports are open, as you can see, you can access cloud.ihasamoose.ca
Any ideas how to get this guy certified?
