# Renewal "Connection Refused" **URL:** \ **Category:** Help\ **Created:** [October 25, 2020, 4:13pm UTC](https://community.letsencrypt.org/t/renewal-connection-refused/136792 "2020-10-25T16:13:38Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![IceCream](https://avatars.discourse-cdn.com/v4/letter/i/85e7bf/32.png) [@IceCream](https://community.letsencrypt.org/u/IceCream)\ **Post date:** [October 25, 2020, 4:13pm UTC](https://community.letsencrypt.org/t/renewal-connection-refused/136792/1 "2020-10-25T16:13:38Z")
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: [iassist.ru](http://iassist.ru) [www.iassist.ru](http://www.iassist.ru) current certificate crt.sh ID 3357996933 I ran this command: certbot renew --dry-run It produced this output: Cert not due for renewal, but simulating renewal for dry run Plugins selected: Authenticator webroot, Installer None Renewing an existing certificate Performing the following challenges: http-01 challenge for [iassist.ru](http://iassist.ru) http-01 challenge for [www.iassist.ru](http://www.iassist.ru) Waiting for verification... Challenge failed for domain [iassist.ru](http://iassist.ru) Challenge failed for domain [www.iassist.ru](http://www.iassist.ru) http-01 challenge for [iassist.ru](http://iassist.ru) http-01 challenge for [www.iassist.ru](http://www.iassist.ru) Cleaning up challenges Attempting to renew cert ([iassist.ru](http://iassist.ru)) from /etc/letsencrypt/renewal/iassist.ru.conf produced an unexpected error: Some challenges have failed.. Skipping. Domain: [iassist.ru](http://iassist.ru) Type: connection Detail: Fetching [http://iassist.ru/.well-known/acme-challenge/ROdY-0ZUybBa9d\_u6v5Jr3UE0Bpea\_3OUP8t0KpKYRQ:](http://iassist.ru/.well-known/acme-challenge/ROdY-0ZUybBa9d_u6v5Jr3UE0Bpea_3OUP8t0KpKYRQ:) Connection refused My web server is (include version): nginx/1.19.3 The operating system my web server runs on is (include version): centos-release-8.2-2.2004.0.2.el8.x86\_64 My hosting provider, if applicable, is: no, this is a home system I can login to a root shell on my machine (yes or no, or I don't know): yes I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): certbot 1.9.0 ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [October 25, 2020, 4:37pm UTC](https://community.letsencrypt.org/t/renewal-connection-refused/136792/2 "2020-10-25T16:37:46Z")
Your port 443 (HTTPS) is working fine, **but** as the name already suggests, the `http-01` challenge uses the HTTP protocol on port 80. And your nginx isn't answering on port 80: `curl: (7) Failed to connect to iassist.ru port 80: Connection refused` So you'll need to open port 80 somehow: perhaps in nginx? Perhaps in your firewall? Perhaps in your (NAT) router? ---
**Author:** ![IceCream](https://avatars.discourse-cdn.com/v4/letter/i/85e7bf/32.png) [@IceCream](https://community.letsencrypt.org/u/IceCream)\ **Post date:** [October 25, 2020, 4:47pm UTC](https://community.letsencrypt.org/t/renewal-connection-refused/136792/3 "2020-10-25T16:47:50Z")
Thanks a lot, it worked. I checked it with curl, but from the internal network, and the error was in the settings of the router. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [November 24, 2020, 4:47pm UTC](https://community.letsencrypt.org/t/renewal-connection-refused/136792/4 "2020-11-24T16:47:52Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.