Hi @chrissly90
there are errors, but more configuration problems.
You have a new certificate created ( https://check-your-website.server-daten.de/?q=bind.tinfoil-hat.net#ct-logs ):
Issuer | not before | not after | Domain names | LE-Duplicate | next LE |
---|---|---|---|---|---|
Let's Encrypt Authority X3 | 2019-08-05 | 2019-11-03 | bind.tinfoil-hat.net - 1 entries | duplicate nr. 1 |
And you have a Grade P:
Domainname | Http-Status | redirect | Sec. | G |
---|---|---|---|---|
• http://bind.tinfoil-hat.net/ | ||||
167.86.109.153 | 301 | https://bind.tinfoil-hat.net/ | 0.064 | A |
• https://bind.tinfoil-hat.net/ | ||||
167.86.109.153 | -10 | 0.104 | P | |
SecureChannelFailure - The request was aborted: Could not create SSL/TLS secure channel. | ||||
• http://bind.tinfoil-hat.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de | ||||
167.86.109.153 | 301 | https://bind.tinfoil-hat.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de | 0.063 | A |
Visible Content: 301 Moved Permanently nginx | ||||
• https://bind.tinfoil-hat.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de | -10 | 0.107 | P | |
SecureChannelFailure - The request was aborted: Could not create SSL/TLS secure channel. | ||||
Visible Content: |
But the reason is simple:
P https://bind.tinfoil-hat.net/ 167.86.109.153
-10
Error creating a TLS-Connection: TLSv1.3 found, but no connection via TLSv1.2 possible. Please activate TLSv1.2
There is only Tls.1.3 active, you should activate Tls.1.2.
Checking your site in a browser, there is a - simple - Bad Gateway - error:
502 Bad Gateway
nginx
So your proxy configuration doesn't work.
That may be the error message - partial sent something, then interrupted.