My domain is: test.compute.sta1.nscale.com (resolves to 193.143.78.6) I ran this command (staging, succeeds):slight_smile: lego --email=notifications@example.com --domains= test.compute.sta1.nscale.com --server https://acme-staging-v02.api.letsencrypt.org/directory --http.webroot /etc/letsencrypt/ht…

Welcome @ssadiq Thanks for a terrific report. I agree that the most likely problem is some network routing problem between the LE primary center and your site. You linked to a thread where I'd commented on a similar problem. And, I don't have a lot more to add than what I said there. But, I do…

I am seeing the same production-only timeout pattern: staging validates immediately, while the production run reports a connect timeout despite the identical webroot. The repeated failure after a successful staging validation makes this look like a validator-path or timing issue rather than a straig…

[image] Jordan.Brooks3: I am seeing the same production-only timeout pattern Would you provide a domain name affected? I'd like to run some traces to see what part of the path is common between yours and the other. Is this also a recent issue? When did it start? How many domains is it aff…

Thanks Mike, appreciate the detailed reply. On the DNS point: nscale.com 's zone is hosted on Cloudflare for DNS management, but this particular subdomain's A record points straight at our own infrastructure, it isn't proxied. That said, you're right that it doesn't explain or fix the underlying rou…

The affected host is test.compute.sta1.nscale.com , as shown in my original report. It began on 13 Aug and still reproduces only against production, with staging succeeding from the same webroot.

[image] Jordan.Brooks3: The affected host is test.compute.sta1.nscale.com, as shown in my original report. So @Jordan.Brooks3 are you also @ssadiq ? Or at least on the same tech team? Because you weren't the first poster in this thread and did not provide a hostname in your first post. Yo…

@MikeMcQ unfortunately I still haven't been able to resolve the problem. I was hoping someone with LE inside knowledge may be able to point me in the right direction or preferably a workaround.

[image] ssadiq: or preferably a workaround. I mentioned using a DNS Challenge so that's one option. You do not need to proxy your domain at Cloudflare to use that. Be sure to evaluate the security risk by needing to store the API token for the ACME Client. A DNS Challenge is not dependent …

Production HTTP-01 validation times out immediately after staging succeeds (Primary validator only, no firewall block found)

Help

Topic		Replies	Views
Timeout when attempting to issue certificate for cerb00apps.onesoft.es, but Let’s Debug can connect Help	26	329	July 12, 2025
Timeout during connect (likely firewall problem) Help	15	2049	October 30, 2022
Failed http-01 challenge Help	10	5048	August 9, 2021
Timeout during connect Help	5	1101	September 22, 2020
Timeout during connect (likely firewall problem) Help	6	2718	March 22, 2020

Production HTTP-01 validation times out immediately after staging succeeds (Primary validator only, no firewall block found)

Related topics