Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: nextcloud.echogroupinc.com
I ran this command:
It produced this output:
Detail: During secondary validation: 70.171.148.25: Fetching http://nextcloud.echogroupinc.com/.well-known/acme-challenge/--vfXgNo7l0V63-4nbPnLfVRxGbHdww0e0YySEepWjk: Timeout during connect (likely firewall problem)
To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided.
2024-04-29 12:37:56,247:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
File "/snap/nextcloud/41512/lib/python2.7/site-packages/certbot/auth_handler.py", line 90, in handle_authorizations
self._poll_authorizations(authzrs, max_retries, best_effort)
File "/snap/nextcloud/41512/lib/python2.7/site-packages/certbot/auth_handler.py", line 154, in _poll_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
AuthorizationError: Some challenges have failed.
Description: Place files in webroot directory
Interfaces: IAuthenticator, IPlugin
Entry point: webroot = certbot.plugins.webroot:Authenticator
Initialized: <certbot.plugins.webroot.Authenticator object at 0x7f78dde8d0d0>
Prep: True
2024-04-29 12:56:55,509:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0x7f78dde8d0d0> and installer None
2024-04-29 12:56:55,509:INFO:certbot.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2024-04-29 12:56:55,513:DEBUG:certbot.main:Picked account: <Account(RegistrationResource(body=Registration(status=None, terms_of_service_agreed=None, agreement=None, only_return_existing=None, contact=(), key=None, external_account_binding=None), uri=u'https://acme-v02.api.letsencrypt.org/acme/acct/390151350', new_authzr_uri=None, terms_of_service=None), 4db2ae5f7ffb5a2048b4f46390bc75f7, Meta(creation_host=u'nextcloud', creation_dt=datetime.datetime(2022, 2, 1, 14, 44, 18, tzinfo=)))>
2024-04-29 12:56:55,514:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
2024-04-29 12:56:55,517:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
2024-04-29 12:56:55,665:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 747
2024-04-29 12:56:55,666:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Mon, 29 Apr 2024 17:56:55 GMT
Content-Type: application/json
Content-Length: 747
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
My web server is (include version): nextcloud 27.1.8
The operating system my web server runs on is (include version):
Ubuntu 22.04.4 LTS
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know):
Yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
The version of my client is (e.g. output of certbot --version
or certbot-auto --version
if you're using Certbot): Certbot 1.21.0
Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 401 / 403 Not Allowed / Forbidden. A http status 404 - Not Found - is expected. Creating a Letsencrypt certificate via http-01 challenge may not work.