No response from destination server

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: wiborg.me

I ran this command: Synology NAS (DSM 7.2) Secirity -> Install certificate

It produced this output:
No response from destination server. Please try later.

My web server is (include version):
nginx

The operating system my web server runs on is (include version): GNU/LInux ver 3.2.101

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

2

Is this expected?:

image
image733×312 13.7 KB

3

note: the "www" page reaches the Synology login page
[which I would NOT allow access to from the Internet - especially running software from 2022]

4

Thank you for looking into it.
Do you reach the signin url (https://www.wiborg.me:5000/#/signin)? That is what happen to me. Plan to take care of the www problem by a redirect.
The web-server is not active in the server so the Synology default response is to be expected.
Only the Photos application is exposed.
I have had a Lets Encrypt certificate some time ago on this configuration but the renewal failed so I removed the certificate to try install a new.

Any ideas?

5

I can reach that port [5000], but it's HTTP [not HTTPS]:
http://www.wiborg.me:5000/

6

I don't know anything about Synology, but "No response from destination server" makes me think that it can't connect outbound to talk with Let's Encrypt's API. Does the system have working outbound Internet access?

7

ping works nicely from the server so outbound trafic checks fine

8

That message is coming from the Synology installer, while the visible symptom is that only the Photos app is exposed. The HTTP challenge still needs a reachable web endpoint on port 80 before the certificate can be issued.