# ./letsencrypt-auto --apache -d "Failed to connect to 195.20.46.185:443 for TLS-SNI-01"

**URL:** <https://community.letsencrypt.org/t/letsencrypt-auto-apache-d-failed-to-connect-to-195-20-46-185-443-for-tls-sni-01/17532>\
**Category:** Help\
**Created:** [July 2, 2016, 12:31am UTC](https://community.letsencrypt.org/t/letsencrypt-auto-apache-d-failed-to-connect-to-195-20-46-185-443-for-tls-sni-01/17532 "2016-07-02T00:31:11Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![asriroc](https://avatars.discourse-cdn.com/v4/letter/a/90db22/32.png) [@asriroc](https://community.letsencrypt.org/u/asriroc)\
**Post date:** [July 2, 2016, 12:31am UTC](https://community.letsencrypt.org/t/letsencrypt-auto-apache-d-failed-to-connect-to-195-20-46-185-443-for-tls-sni-01/17532/1 "2016-07-02T00:31:12Z")

</div>

Please fill out the fields below so we can help you better.

My domain is: [zethago.tk](http://zethago.tk)

I ran this command: ./letsencrypt-auto --apache -d [zethago.tk](http://zethago.tk)

It produced this output: Requesting root privileges to run certbot…  
/home/erick/.local/share/letsencrypt/bin/letsencrypt --apache -d [zethago.tk](http://zethago.tk)  
Failed authorization procedure. [zethago.tk](http://zethago.tk) (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Failed to connect to 195.20.46.185:443 for TLS-SNI-01 challenge

IMPORTANT NOTES:

- The following errors were reported by the server:

My operating system is (include version): Linux Mint 18

My web server is (include version): Apache 2.4.18

My hosting provider, if applicable, is: [http://www.dot.tk](http://www.dot.tk)

I can login to a root shell on my machine (yes or no, or I don’t know): Yes.

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No.

---

<div class="post-metadata">

**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\
**Post date:** [July 2, 2016, 6:23am UTC](https://community.letsencrypt.org/t/letsencrypt-auto-apache-d-failed-to-connect-to-195-20-46-185-443-for-tls-sni-01/17532/2 "2016-07-02T06:23:11Z")

</div>

Have you got a firewall or anything that could be blocking access to 195.20.46.185:443 from the internet ?

---

<div class="post-metadata">

**Author:** ![asriroc](https://avatars.discourse-cdn.com/v4/letter/a/90db22/32.png) [@asriroc](https://community.letsencrypt.org/u/asriroc)\
**Post date:** [July 2, 2016, 1:17pm UTC](https://community.letsencrypt.org/t/letsencrypt-auto-apache-d-failed-to-connect-to-195-20-46-185-443-for-tls-sni-01/17532/3 "2016-07-02T13:17:22Z")

</div>

Linux mint comes with ufw firewall, which I add ‘in’ access.

$ sudo ufw app list  
Available applications:  
Apache  
Apache Full  
Apache Secure  
CUPS

$ sudo ufw app info "Apache Full"  
Profile: Apache Full  
Title: Web Server (HTTP,HTTPS)  
Description: Apache v2 is the next generation of the omnipresent Apache web  
server.

Ports:  
80,443/tcp

Please note that I can use curl, and get html content.

$ curl [http://www.zethago.tk](http://www.zethago.tk)

Please also note that I am currently experiment this apache server on my laptop, which I would turn it off sometime.

Thank you so much for your help.

---

<div class="post-metadata">

**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\
**Post date:** [July 2, 2016, 1:23pm UTC](https://community.letsencrypt.org/t/letsencrypt-auto-apache-d-failed-to-connect-to-195-20-46-185-443-for-tls-sni-01/17532/4 "2016-07-02T13:23:35Z")

</div>

http is port 80

the error / issue is regarding https ( port 443). using curl I can access [http://www.zethago.tk](http://www.zethago.tk) but not [https://www.zethago.tk](https://www.zethago.tk). Can you access https (port 443 ) ?

---

<div class="post-metadata">

**Author:** ![asriroc](https://avatars.discourse-cdn.com/v4/letter/a/90db22/32.png) [@asriroc](https://community.letsencrypt.org/u/asriroc)\
**Post date:** [July 2, 2016, 1:36pm UTC](https://community.letsencrypt.org/t/letsencrypt-auto-apache-d-failed-to-connect-to-195-20-46-185-443-for-tls-sni-01/17532/5 "2016-07-02T13:36:20Z")

</div>

I have not set up any https. I keep thinking that I need to create certificate, first. I will try what you suggested now by going to the dns, and adding https.

Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [August 1, 2016, 1:36pm UTC](https://community.letsencrypt.org/t/letsencrypt-auto-apache-d-failed-to-connect-to-195-20-46-185-443-for-tls-sni-01/17532/6 "2016-08-01T13:36:33Z")

</div>

Closed on August 1, 2016, 1:36pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
