I will try to answer all your questions.
a) at home, I have a box and my ISP is SFR. The IP addresses of my box are:
--> IPv4: 109.16.70.70.
--> IPv6: 2a02:8435:342:3801::100
The ipv6 address of my box no longer works.
b) I configured in my computer, under windows 10 pro, the Hurricane Electric ipv6 tunnel.
--> IPv6: 2001:470:c94a:100
This ipv6 address is operational.
c) We find the IP addresses of my box by doing:
[code]C:>nslookup chez.jcz.fr
Server: box
Address: 192.168.1.1
Non-authoritative answer:
Name: chez.jcz.fr
Addresses: 2001:470:c94a::100
109.16.70.70
C:>[/code]
d) I have a site which is hosted by alwaysdata in Paris.
The name of my domain is "www.jcz.fr".
You can access it by also putting "jcz.fr".
e) the IP addresses of this site where my site is hosted are:
--> ipv6: 185.31.40.11
--> ipv6: 2a00:b6e0:1:20:2::1
e) we find these same ones by doing:
[code]C:>nslookup jcz.fr
Server: box
Address: 192.168.1.1
Non-authoritative answer:
Name: jcz.fr
Addresses: 2a00:b6e0:1:20:2::1
185.31.40.11
C:>[/code]
f) in my computer, so at home, I installed WampServer:
--> Apache 2.4.55
--> MySQL: 8.0.32
--> PHP: 8.2.1
--> Phpmyadmin: 5.2.0
g) I have a local site, accessible from the internet, which is called "chez.jcz.fr".
I installed a let's encrypt certificate named "chez.jcz.fr".
On my other sites, not accessible from the internet, I created a Ca certificate named "Artemus & Cie" with OPENSSL.
I'm looking to configure the SSL protocol in my WampServer.
I managed to do it with my OPENSSL "Artemus & Cie" certificate.
But I can't do it with the Let's Encrypt "chez.jcz.fr" certificate.
h) my site "chez.jcz.fr" is not accessible from the internet.
I have disabled the NAT rules concerning the redirection of HTTP and HTTPS ports to my computer.
This is why my site "chez.jcz.fr" is not accessible with the IPv4 address.
i) access test by IPv4:
[code]C:>curl -Ii http://chez.jcz.fr/.well-known/acme-challenge/sometestfile
HTTP/1.1 301 Moved Permanently
Date: Sat, 04 Feb 2023 18:15:40 GMT
Server: Apache
Location: https://chez.jcz.fr/.well-known/acme-challenge/sometestfile
Content-Type: text/html; charset=iso-8859-1
C:>curl -Ii http://chez.jcz.fr:80/.well-known/acme-challenge/sometestfile
HTTP/1.1 301 Moved Permanently
Date: Sat, 04 Feb 2023 18:15:46 GMT
Server: Apache
Location: https://chez.jcz.fr/.well-known/acme-challenge/sometestfile
Content-Type: text/html; charset=iso-8859-1
C:>curl -Ii http://chez.jcz.fr:443/.well-known/acme-challenge/sometestfile
HTTP/1.1 400 Bad Request
Date: Sat, 04 Feb 2023 18:15:54 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, close
X-Powered-By: PHP/8.2.1
Vary: Accept-Encoding,User-Agent
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 0
Content-Length: 228
Content-Type: text/html
Content-Language: fr
C:>curl -Ii https://chez.jcz.fr/.well-known/acme-challenge/sometestfile
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 18:16:02 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Sat, 04 Feb 2023 18:08:15 GMT
Accept-Ranges: bytes
Content-Length: 168
Vary: Accept-Encoding,User-Agent
Content-Language: fr
C:>curl -Ii https://109.16.70.70:443/.well-known/acme-challenge/sometestfile
curl: (28) Failed to connect to 109.16.70.70 port 443 after 21009 ms: Timed out
C:>[/code]
j) access test by IPv6.
I am still under my old IPv6 address 2a02:8435:342:3801::100 which no longer works.
[code]C:>curl -Ii6 http://[2001:470:c94a::100]/.well-known/acme-challenge/sometestfile
HTTP/1.1 301 Moved Permanently
Date: Sat, 04 Feb 2023 18:28:42 GMT
Server: Apache
Location: https://chez.jcz.fr/.well-known/acme-challenge/sometestfile
Content-Type: text/html; charset=iso-8859-1
C:>curl -Ii6 http://[2001:470:c94a::100]:80/.well-known/acme-challenge/sometestfile
HTTP/1.1 301 Moved Permanently
Date: Sat, 04 Feb 2023 18:28:51 GMT
Server: Apache
Location: https://chez.jcz.fr/.well-known/acme-challenge/sometestfile
Content-Type: text/html; charset=iso-8859-1
C:>curl -Ii6 http://[2001:470:c94a::100]:443/.well-known/acme-challenge/sometestfile
HTTP/1.1 400 Bad Request
Date: Sat, 04 Feb 2023 18:28:56 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, close
X-Powered-By: PHP/8.2.1
Vary: Accept-Encoding,User-Agent
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 0
Content-Length: 228
Content-Type: text/html
Content-Language: fr
C:>curl -Ii6 https://[2001:470:c94a::100]/.well-known/acme-challenge/sometestfile
curl: (60) schannel: SNI or certificate check failed: SEC_E_WRONG_PRINCIPAL (0x80090322) - Le nom principal de la cible n'est pas correct.
More details here: curl - SSL CA Certificates
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
C:>curl -Ii6 http://chez.jcz.fr/.well-known/acme-challenge/sometestfile
curl: (28) Failed to connect to chez.jcz.fr port 80 after 42034 ms: Timed out
C:>curl -Ii6 https://chez.jcz.fr/.well-known/acme-challenge/sometestfile
curl: (28) Failed to connect to chez.jcz.fr port 443 after 42068 ms: Timed out
C:>[/code]
k) I still have some problems with IPv6.
My old IPv6 address is still present in the windows hosts file.
As for the let's encrypt certificate, I can create one again.
Thank you all for your participation.
Cordially.
Artemus24.
@+
