Renewing my SSL

Help
5

Using the online tool Let's Debug yields these results https://letsdebug.net/www.toucanpromotions.ca/2300001

ANotWorking
Error
www.toucanpromotions.ca has an A (IPv4) record (208.215.218.15) but a request to this address over port 80 did not succeed. Your web server must have at least one working IPv4 or IPv6 address.
Get "https://www.toucanpromotions.ca/.well-known/acme-challenge/letsdebug-test": read tcp 65.21.146.168:56986->208.215.218.15:443: read: connection reset by peer

Trace:
@0ms: Making a request to http://www.toucanpromotions.ca/.well-known/acme-challenge/letsdebug-test (using initial IP 208.215.218.15)
@0ms: Dialing 208.215.218.15
@407ms: Server response: HTTP 301 Moved Permanently
@407ms: Received redirect to https://www.toucanpromotions.ca/.well-known/acme-challenge/letsdebug-test
@407ms: Dialing 208.215.218.15
@717ms: Experienced error: read tcp 65.21.146.168:56986->208.215.218.15:443: read: connection reset by peer

IssueFromLetsEncrypt
Error
A test authorization for www.toucanpromotions.ca to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
208.215.218.15: Fetching https://www.toucanpromotions.ca/.well-known/acme-challenge/0X4M8rJyYvOyPY4LBC7cnFgZzuUxjDuzwZGYsaEc7rc: Connection reset by peer

Yet when I use nmap and curl I see this

Check that Ports 80 & 443 are open.

$ nmap -Pn -p80,443 www.toucanpromotions.ca                                                                          Starting Nmap 7.80 ( https://nmap.org ) at 2024-12-04 00:12 UTC
Nmap scan report for www.toucanpromotions.ca (208.215.218.15)
Host is up (0.061s latency).
rDNS record for 208.215.218.15: www.promoplace.com

PORT    STATE SERVICE
80/tcp  open  http
443/tcp open  https

Nmap done: 1 IP address (1 host up) scanned in 0.14 seconds

Try the simulated ACME request on HTTP; and we get redirected to HTTPS

$ curl -Ii http://toucanpromotions.ca/.well-known/acme-challenge/sometestfile -A "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Content-Type: text/html
Location: https://www.toucanpromotions.ca/.well-known/acme-challenge/sometestfile
ServerID: 8
Date: Wed, 04 Dec 2024 00:13:14 GMT

And follow the redirect to HTTPS gives a response code of HTTP/1.1 404 Not Found, as expected.

$ curl -k -Ii https://www.toucanpromotions.ca/.well-known/acme-challenge/sometestfile -A "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"
HTTP/1.1 404 Not Found
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 2038
Content-Type: text/html
Last-Modified: Mon, 02 Dec 2024 18:13:33 GMT
ServerID: 8
Content-Security-Policy: frame-ancestors 'self' *.promoplace.com;
X-Frame-Options: sameorigin
Date: Wed, 04 Dec 2024 00:13:32 GMT

Yet Let's Debug got for a response
Get "https://www.toucanpromotions.ca/.well-known/acme-challenge/letsdebug-test": read tcp 65.21.146.168:56986->208.215.218.15:443: read: connection reset by peer

Edit

Possibly a Geo Blocking issue of sorts

Regarding Geo Blocking please read:

3 Likes