# Server is unable to connect to the client **URL:** \ **Category:** Help\ **Created:** [December 7, 2015, 6:58pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199 "2015-12-07T18:58:47Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![wolfie](https://avatars.discourse-cdn.com/v4/letter/w/c2a13f/32.png) [@wolfie](https://community.letsencrypt.org/u/wolfie)\ **Post date:** [December 7, 2015, 6:58pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/1 "2015-12-07T18:58:47Z")
I am trying to get my certs running on my server however the install fails out with the following 2015-12-07 13:47:26,222:INFO:letsencrypt.auth\_handler:Waiting for verification… 2015-12-07 13:47:26,232:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 13:47:29,547:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 13:47:29,913:INFO:letsencrypt.reporter:Reporting to user: The following ‘urn:acme:error:connection’ errors were reported by the server: Domains: [mail.hastingstechs.com](http://mail.hastingstechs.com) Error: The server could not connect to the client for DV 2015-12-07 13:47:29,913:INFO:letsencrypt.auth\_handler:Cleaning up challenges Failed authorization procedure. [mail.hastingstechs.com](http://mail.hastingstechs.com) (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client for DV :: Failed to connect to host for DVSNI challenge IMPORTANT NOTES: - The following ‘urn:acme:error:connection’ errors were reported by the server: I am able to ping the server but am unable to find anything that details what is going wrong. Any assistance is appreciated. ---
**Author:** ![pfg](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/pfg/32/1924_2.png) [@pfg](https://community.letsencrypt.org/u/pfg)\ **Post date:** [December 7, 2015, 7:31pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/2 "2015-12-07T19:31:38Z")
Please run the client in verbose mode (`-v`) and provide: 1. The exact command (including all arguments or options you selected in interactive mode) you used 2. the full command output 3. any log files in `/var/log/letsencrypt/` ---
**Author:** ![sixberk](https://avatars.discourse-cdn.com/v4/letter/s/258eb7/32.png) [@sixberk](https://community.letsencrypt.org/u/sixberk)\ **Post date:** [December 7, 2015, 7:32pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/3 "2015-12-07T19:32:41Z")
same problem debian jessie ---
**Author:** ![sixberk](https://avatars.discourse-cdn.com/v4/letter/s/258eb7/32.png) [@sixberk](https://community.letsencrypt.org/u/sixberk)\ **Post date:** [December 7, 2015, 7:39pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/4 "2015-12-07T19:39:27Z")
2015-12-07 19:28:22,288:DEBUG:letsencrypt.cli:Root logging level set at 30 2015-12-07 19:28:22,289:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2015-12-07 19:28:22,290:DEBUG:letsencrypt.cli:letsencrypt version: 0.1.0 2015-12-07 19:28:22,290:DEBUG:letsencrypt.cli:Arguments: [’-webroot’, ‘-w’, ‘/home/www.domain.com/’, ‘–apache’] 2015-12-07 19:28:22,292:DEBUG:letsencrypt.cli:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone) 2015-12-07 19:28:22,297:DEBUG:letsencrypt.cli:Requested authenticator apache and installer apache 2015-12-07 19:28:22,615:DEBUG:letsencrypt.display.ops:Single candidate plugin: \* apache Description: Apache Web Server - Alpha Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = letsencrypt\_apache.configurator:ApacheConfigurator Initialized: \ Prep: True 2015-12-07 19:28:22,616:DEBUG:letsencrypt.cli:Selected authenticator \ and installer \ 2015-12-07 19:28:37,243:DEBUG:letsencrypt.cli:Picked account: \ 2015-12-07 19:28:37,244:DEBUG:root:Sending GET request to [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory). args: (), kwargs: {} 2015-12-07 19:28:37,248:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 19:28:37,642:DEBUG:requests.packages.urllib3.connectionpool:“GET /directory HTTP/1.1” 200 263 2015-12-07 19:28:37,645:DEBUG:root:Received \. Headers: {‘Content-Length’: ‘263’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:37 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:37 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘h5Hv54h\_sd3fIhJYS\_3nQNS73v0KRiu4aZMGXnHsxMA’}. Content: '{“new-authz”:“[https://acme-v01.api.letsencrypt.org/acme/new-authz",“new-cert”:“https://acme-v01.api.letsencrypt.org/acme/new-cert”,“new-reg”:“https://acme-v01.api.letsencrypt.org/acme/new-reg”,“revoke-cert”:"https://acme-v01.api.letsencrypt.org/acme/revoke-cert](https://acme-v01.api.letsencrypt.org/acme/new-authz%22,%22new-cert%22:%22https://acme-v01.api.letsencrypt.org/acme/new-cert%22,%22new-reg%22:%22https://acme-v01.api.letsencrypt.org/acme/new-reg%22,%22revoke-cert%22:%22https://acme-v01.api.letsencrypt.org/acme/revoke-cert)”}' 2015-12-07 19:28:37,646:DEBUG:acme.client:Received response \ (headers: {‘Content-Length’: ‘263’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:37 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:37 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘h5Hv54h\_sd3fIhJYS\_3nQNS73v0KRiu4aZMGXnHsxMA’}): ‘{“new-authz”:“[https://acme-v01.api.letsencrypt.org/acme/new-authz",“new-cert”:“https://acme-v01.api.letsencrypt.org/acme/new-cert”,“new-reg”:“https://acme-v01.api.letsencrypt.org/acme/new-reg”,“revoke-cert”:"https://acme-v01.api.letsencrypt.org/acme/revoke-cert](https://acme-v01.api.letsencrypt.org/acme/new-authz%22,%22new-cert%22:%22https://acme-v01.api.letsencrypt.org/acme/new-cert%22,%22new-reg%22:%22https://acme-v01.api.letsencrypt.org/acme/new-reg%22,%22revoke-cert%22:%22https://acme-v01.api.letsencrypt.org/acme/revoke-cert)”}‘ 2015-12-07 19:28:37,820:INFO:letsencrypt.crypto\_util:Generating key (2048 bits): /etc/letsencrypt/keys/0003\_key-letsencrypt.pem 2015-12-07 19:28:37,823:INFO:letsencrypt.crypto\_util:Creating CSR: /etc/letsencrypt/csr/0003\_csr-letsencrypt.pem 2015-12-07 19:28:37,824:DEBUG:letsencrypt.client:CSR: CSR(file=’/etc/letsencrypt/csr/0003\_csr-letsencrypt.pem’, data=‘0\x82\x02\x8c0\x82\x01t\x02\x01\x000\x1a1\x180\x16\x06\x03U\x04\x03\x0c\[x0fprojekt.domain.com](http://x0fprojekt.domain.com)\x82\x01"0\r\x06\t\*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc7`\xa6\xa2\xe73H\x80r\xba\xd3\xbcU\x95Z\x82\xd0CuA\xcb\x96x\x7f\xd6\x9f\xe8\xc0\x8fp\x18\x1f\x8e\x84\x8f\xe8L\xd7\xc8\xa1/\xfe\x87\xef\x01\x13\xb8\x15\x82\xc1\xa2\xb0\xc4U\x98\xfa\tC\x03\x7fa\xb0\x01\x84\xa0\xfd\xd3\xc40\xa2<\tj-\xcf\x1e\x88r\xc4\xf2\x11i\x9c\xdf\x18\x9d\xab\x07\xab\x10=\x1cp\x8bZU\x94Hl\xe4\x83\x94\x81\xcdy9\xd9\'#\x96^[c\xffkh\xc6?\xb5=U\x86:\xe5\xb5fs\xb6\x17\x0e\xeb`s\xe0\x17\x9b\xf0\x8a%hR\xf3\xc1\xcf[~\x9caM\>{\x8b\x84;\xe9\x90\x03\xddF\xba\x8f\xd1\>&~u\x83\x90\x0fn[oi\xee\xe12P,\xdb\xe5\x96\xe0\xf8\xe0F\xb7\xb4\xba?\xb1\x86\xe5\xec\xad(1\x1f\x17\xca\xac\xe1\xd3g\xcaN(9\x9f\x9e\xac\xc1\xae\x8e\xa4\xaf\xc3\x00\xc0w\xce\xd8l6?yV@\xadC\xcf|\xc6!\<1\x01\x9cx\xe2\xfd\xc4I\tL\xa1\xa1\xd1\xa6\xd0\xa4\xdbD\xaf\xf0\xc6m\x02\x03\x01\x00\x01\xa0-0+\x06\t\*\x86H\x86\xf7\r\x01\t\x0e1\x1e0\x1c0\x1a\x06\x03U\x1d\x11\x04\x130\x11\x82\x0fprojekt.domain.com0\r\x06\t\*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00{nz\x1c\x04\xee\x05\xf4\xa5j\x0e\xf6\x15\x93\xd4u\xa9&m\xdf\x8e\x81\r\x04\xfb\x04\xfal\xe4N\x10\`\x05\xf5u\xf6\x16\xd1\xfe\xeeN\xab\xca\x18\xd1\xa3\x1e*\'\xcb\xd8\x9c\x85H\x99\xe9@\xe8\xfe\xf1eIv:n\x98\xad\xe9G\x9bU\x85"q\xaf\x12\\b\x15\x96\xfd`s\xbe\x89\xc9\x97\x88\xf3j\x9d)\x04y\xb4\x0f%\x1bf\xd6wd\x9f\x16\xb402\xc1A\xb1\xb70\x8c\x86\xef\xe7\xe7\x0f\x87q\xb17Rh\nm\x13\x08Mdf\xee\xdb\<\xcd\x82R\x95\xa7\xa1\x96&\x9f\x11Q G{C:\x8e\xe6]6\x98\x91\xeeJD\xf5\xdf\xd7’$\xf7`\xfe\x14\x85\xc2\x05\x982wk,\xc4\xaa7M\xe5~\x95\x86y>Pv)\x8aU\xe5n\x935\xfeA\xf2\x94\t\xdc4\xa3y\x1aB\xc3\xe8\xd7\x1b\x00\xdb\xfc\xf0\xef7\xbb\x91\xb0\x1e\xe1\xc5\xc1P\xf9z \xc4\xe7\xe2:\x88\x14. Headers: {'Content-Length': '0', 'Pragma': 'no-cache', 'Expires': 'Mon, 07 Dec 2015 19:28:37 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Allow': 'POST', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 07 Dec 2015 19:28:37 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': 'gykChVayiJbm_CqOodFoMalPxPxY3iumugkhYpU1j-U'}. Content: '' 2015-12-07 19:28:38,118:DEBUG:acme.client:Storing nonce: '\x83)\x02\x85V\xb2\x88\x96\xe6\xfc*\x8e\xa1\xd1h1\xa9O\xc4\xfcX\xde+\xa6\xba\t!b\x955\x8f\xe5' 2015-12-07 19:28:38,118:DEBUG:acme.jose.json_util:Omitted empty fields: status=None, combinations=None, expires=None, challenges=None 2015-12-07 19:28:38,119:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "projekt.domain.com"}, "resource": "new-authz"} 2015-12-07 19:28:38,121:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, alg=None, jku=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None, jwk=None 2015-12-07 19:28:38,123:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), typ=None, jku=None, nonce=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None 2015-12-07 19:28:38,124:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "0q8k1C3kWxqQ6ymwEkTFl9yfkSvLZOROF9Eh4JydiO3rpXJI2OlBaBPOqVnvB22aGRJEoIkppBiO219zQULa_I7jeIYA0cLk8yccvvJDDIXH_treELA3e39ZhHieKZJhKdAc0hmUK1w0bkvZwxBnvI26Wkbps7XyRMHxNMwZdbQLBKuetHB971G2iDybVXSPe41Ran-tckBfQ2ynjliv-mpv5oHNMltqjGonAM5hnmpxZLEeAYm75tK9q2wm_2CqaFoDOffeGQBlOLn0cASwDH1tIO3BpykvaCUqjNKJlUAGZuQtPypGUGztWtEzEyyp3AbOUmR9KnE2-5g81yOaJw"}}, "protected": "eyJub25jZSI6ICJneWtDaFZheWlKYm1fQ3FPb2RGb01hbFB4UHhZM2l1bXVna2hZcFUxai1VIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJwcm9qZWt0LnZza2UuY3oifSwgInJlc291cmNlIjogIm5ldy1hdXRoeiJ9", "signature": "zjzCMCurQmwt1jMiPzRZU4rMygcpsuBDJ9OfK4Tdl2ozrW5KszwpspTklToAjgOyjzR7P4uiyZ75RXFz3p12zrQSmIjdTNlNqWlawzJ4ZEA8janjW8fWY-oY-GSpsBKMofc7KCWuT7abOGgcZDTIXFNuV_x1iXhV2hVkXZS0WAGLp_WCS4udEJwpaullvQ7ceB_tKjKf-v1XQsx-DPXqwsp597cENWM38gIa37S71WM5IaHTMevp5by7gw5Qgvgwed9bHTnDQ2VIGWoCc9_QcORGIse8jhga-SB4st40GNJAM5MuVhoJ6TgyvbJrks1lwwwbgZyaRT2wdQA3YmFa8w"}'} 2015-12-07 19:28:38,124:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org 2015-12-07 19:28:38,467:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 568 2015-12-07 19:28:38,470:DEBUG:root:Received . Headers: {'Content-Length': '568', 'Expires': 'Mon, 07 Dec 2015 19:28:38 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': ';rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 07 Dec 2015 19:28:38 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'qe0z6YrCFhoW5sdiXHO9D-lgfYOu-_nAKU79css9-jc'}. Content: '{"identifier":{"type":"dns","value":"projekt.domain.com"},"status":"pending","expires":"2015-12-14T19:28:38.144730933Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599","token":"xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600","token":"3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY"}],"combinations":[[0],[1]]}' 2015-12-07 19:28:38,471:DEBUG:acme.client:Storing nonce: '\xa9\xed3\xe9\x8a\xc2\x16\x1a\x16\xe6\xc7b\\s\xbd\x0f\xe9`}\x83\xae\xfb\xf9\xc0)N\xfdr\xcb=\xfa7’ 2015-12-07 19:28:38,472:DEBUG:acme.client:Received response \ (headers: {‘Content-Length’: ‘568’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:38 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert);rel=“next”’, ‘Location’: ‘[https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk](https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk)’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:38 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘qe0z6YrCFhoW5sdiXHO9D-lgfYOu-_nAKU79css9-jc’}): '{“identifier”:{“type”:“dns”,“value”:“[projekt.domain.com](http://projekt.domain.com)”},“status”:“pending”,“expires”:“2015-12-14T19:28:38.144730933Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599%22,%22token%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98%22%7D,%7B%22type%22:%22http-01%22,%22status%22:%22pending%22,%22uri%22:%22https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600%22,%22token%22:%223X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY%22%7D%5D,%22combinations)”:[[0],[1]]}' 2015-12-07 19:28:38,473:INFO:letsencrypt.auth\_handler:Performing the following challenges: 2015-12-07 19:28:38,473:INFO:letsencrypt.auth\_handler:tls-sni-01 challenge for [projekt.domain.com](http://projekt.domain.com) 2015-12-07 19:28:38,532:DEBUG:letsencrypt\_apache.configurator:Enabled dependency of ssl module - socache\_shmcb 2015-12-07 19:28:38,590:INFO:letsencrypt\_apache.configurator:Enabled Apache ssl module 2015-12-07 19:28:38,718:DEBUG:letsencrypt\_apache.configurator:No Listen 443 directive found. Setting the Apache Server to Listen on port 443 2015-12-07 19:28:39,032:DEBUG:letsencrypt.reverter:Creating backup of /etc/apache2/ports.conf 2015-12-07 19:28:39,034:DEBUG:letsencrypt.reverter:Creating backup of /etc/apache2/apache2.conf 2015-12-07 19:28:42,255:INFO:letsencrypt.auth\_handler:Waiting for verification… 2015-12-07 19:28:42,256:DEBUG:acme.client:Serialized JSON: {“keyAuthorization”: “xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn\_LChbo2Pos3f\_ae2Uu4”, “type”: “tls-sni-01”, “resource”: “challenge”} 2015-12-07 19:28:42,259:DEBUG:acme.jose.json\_util:Omitted empty fields: x5c=(), crit=(), typ=None, alg=None, jku=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None, jwk=None 2015-12-07 19:28:42,265:DEBUG:acme.jose.json\_util:Omitted empty fields: x5c=(), crit=(), typ=None, jku=None, nonce=None, cty=None, x5t=None, kid=None, x5tS256=None, x5u=None 2015-12-07 19:28:42,266:DEBUG:root:Sending POST request to [https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599). args: (), kwargs: {‘data’: '{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “0q8k1C3kWxqQ6ymwEkTFl9yfkSvLZOROF9Eh4JydiO3rpXJI2OlBaBPOqVnvB22aGRJEoIkppBiO219zQULa\_I7jeIYA0cLk8yccvvJDDIXH\_treELA3e39ZhHieKZJhKdAc0hmUK1w0bkvZwxBnvI26Wkbps7XyRMHxNMwZdbQLBKuetHB971G2iDybVXSPe41Ran-tckBfQ2ynjliv-mpv5oHNMltqjGonAM5hnmpxZLEeAYm75tK9q2wm\_2CqaFoDOffeGQBlOLn0cASwDH1tIO3BpykvaCUqjNKJlUAGZuQtPypGUGztWtEzEyyp3AbOUmR9KnE2-5g81yOaJw”}}, “protected”: “eyJub25jZSI6ICJxZTB6NllyQ0Zob1c1c2RpWEhPOUQtbGdmWU91LV9uQUtVNzljc3M5LWpjIn0”, “payload”: “eyJrZXlBdXRob3JpemF0aW9uIjogInhSZmdobTlSa09TRFN6ZDRBVE1DRTFQamVtSEw3MWFSV0lmTjBPT01MOTgub1c4eUpHLVB5anJ5dko5Vjg1SlNnR3luX0xDaGJvMlBvczNmX2FlMlV1NCIsICJ0eXBlIjogInRscy1zbmktMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0”, “signature”: "iYZMofnTNY9A2-vp83xTNyy1R-eF3dIY2GLsNpg478Z_-vqGVLcV8pL-9AkqIf4m0Yr7H1FzNJWG-NMaQvPuZ2NRm9ko97zxUtFrEMTTSQfUkfTSztCAe1Zt8oSSY\_0DCnNjRcBd0isahUq2U0z1mk4q2BzdLasPREKJfYv–XqlroCunm0rH502qnzQ-D\_bDGkRhyFt3SKoF89wyR5bM3-sySd9ZkUfoKkiFlpt6h\_UYIObALSIFBnOz978zPAotS0\_q4VqsXlM31Y2T7dlKh0y6zXWafdGlcgz0XSHz-2QO1eZaPqfuegGvc0ZCjAKUGyzLsdf10r4TCCiSulB7w"}’} 2015-12-07 19:28:42,268:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 19:28:42,595:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599 HTTP/1.1” 202 315 2015-12-07 19:28:42,598:DEBUG:root:Received \. Headers: {‘Content-Length’: ‘315’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:42 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk](https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk);rel=“up”’, ‘Location’: ‘[https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599)’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:42 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘ovZLX3AA5IbqoQhXdfTuMpoGyTnWdhMmgjae44z3loA’}. Content: '{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:"xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn\_LChbo2Pos3f\_ae2Uu4](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599%22,%22token%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98%22,%22keyAuthorization%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4)”}' 2015-12-07 19:28:42,599:DEBUG:acme.client:Storing nonce: '\xa2\xf6K\_p\x00\xe4\x86\xea\xa1\x08Wu\xf4\xee2\x9a\x06\xc99\xd6v\x13&\x826\x9e\xe3\x8c\xf7\x96\x80’ 2015-12-07 19:28:42,600:DEBUG:acme.client:Received response \ (headers: {‘Content-Length’: ‘315’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:42 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk](https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk);rel=“up”’, ‘Location’: ‘[https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599)’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:42 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘ovZLX3AA5IbqoQhXdfTuMpoGyTnWdhMmgjae44z3loA’}): '{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:"xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn\_LChbo2Pos3f\_ae2Uu4](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599%22,%22token%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98%22,%22keyAuthorization%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4)”}' 2015-12-07 19:28:45,603:DEBUG:root:Sending GET request to [https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk](https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk). args: (), kwargs: {} 2015-12-07 19:28:45,605:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 19:28:45,891:DEBUG:requests.packages.urllib3.connectionpool:“GET /acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk HTTP/1.1” 200 667 2015-12-07 19:28:45,892:DEBUG:root:Received \. Headers: {‘Content-Length’: ‘667’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:45 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert);rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:45 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘oRKVWnx249desaPxpkulggUo9tjA8FDq3Ua4pwISz64’}. Content: '{“identifier”:{“type”:“dns”,“value”:“[projekt.domain.com](http://projekt.domain.com)”},“status”:“pending”,“expires”:“2015-12-14T19:28:38Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn\_LChbo2Pos3f\_ae2Uu4”},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599%22,%22token%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98%22,%22keyAuthorization%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4%22%7D,%7B%22type%22:%22http-01%22,%22status%22:%22pending%22,%22uri%22:%22https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600%22,%22token%22:%223X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY%22%7D%5D,%22combinations)”:[[0],[1]]}' 2015-12-07 19:28:45,894:DEBUG:acme.client:Received response \ (headers: {‘Content-Length’: ‘667’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:45 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert);rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:45 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘oRKVWnx249desaPxpkulggUo9tjA8FDq3Ua4pwISz64’}): '{“identifier”:{“type”:“dns”,“value”:“[projekt.domain.com](http://projekt.domain.com)”},“status”:“pending”,“expires”:“2015-12-14T19:28:38Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn\_LChbo2Pos3f\_ae2Uu4”},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599%22,%22token%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98%22,%22keyAuthorization%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4%22%7D,%7B%22type%22:%22http-01%22,%22status%22:%22pending%22,%22uri%22:%22https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600%22,%22token%22:%223X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY%22%7D%5D,%22combinations)”:[[0],[1]]}' 2015-12-07 19:28:48,898:DEBUG:root:Sending GET request to [https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk](https://acme-v01.api.letsencrypt.org/acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk). args: (), kwargs: {} 2015-12-07 19:28:48,900:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 19:28:49,169:DEBUG:requests.packages.urllib3.connectionpool:“GET /acme/authz/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk HTTP/1.1” 200 902 2015-12-07 19:28:49,172:DEBUG:root:Received \. Headers: {‘Content-Length’: ‘902’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:48 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert);rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:48 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘Eudd4iTbyyRbM2GQnD2vOZ7u6z8XwgWBuZIdvEUomNA’}. Content: '{“identifier”:{“type”:“dns”,“value”:“[projekt.domain.com](http://projekt.domain.com)”},“status”:“invalid”,“expires”:“2015-12-14T19:28:38Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“invalid”,“error”:{“type”:“urn:acme:error:connection”,“detail”:“Failed to connect to host for DVSNI challenge”},“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn\_LChbo2Pos3f\_ae2Uu4”,“validationRecord”:[{“hostname”:“projekt.domain.com”,“port”:“443”,“addressesResolved”:[“95.129.96.133”],“addressUsed”:“95.129.96.133”}]},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599%22,%22token%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98%22,%22keyAuthorization%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4%22,%22validationRecord%22:%5B%7B%22hostname%22:%22projekt.domain.com%22,%22port%22:%22443%22,%22addressesResolved%22:%5B%2295.129.96.133%22%5D,%22addressUsed%22:%2295.129.96.133%22%7D%5D%7D,%7B%22type%22:%22http-01%22,%22status%22:%22pending%22,%22uri%22:%22https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600%22,%22token%22:%223X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY%22%7D%5D,%22combinations)”:[[0],[1]]}' 2015-12-07 19:28:49,173:DEBUG:acme.client:Received response \ (headers: {‘Content-Length’: ‘902’, ‘Expires’: ‘Mon, 07 Dec 2015 19:28:48 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert);rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:28:48 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘Eudd4iTbyyRbM2GQnD2vOZ7u6z8XwgWBuZIdvEUomNA’}): '{“identifier”:{“type”:“dns”,“value”:“[projekt.domain.com](http://projekt.domain.com)”},“status”:“invalid”,“expires”:“2015-12-14T19:28:38Z”,“challenges”:[{“type”:“tls-sni-01”,“status”:“invalid”,“error”:{“type”:“urn:acme:error:connection”,“detail”:“Failed to connect to host for DVSNI challenge”},“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599",“token”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98”,“keyAuthorization”:“xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn\_LChbo2Pos3f\_ae2Uu4”,“validationRecord”:[{“hostname”:“projekt.domain.com”,“port”:“443”,“addressesResolved”:[“95.129.96.133”],“addressUsed”:“95.129.96.133”}]},{“type”:“http-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600”,“token”:“3X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY”}],"combinations](https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214599%22,%22token%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98%22,%22keyAuthorization%22:%22xRfghm9RkOSDSzd4ATMCE1PjemHL71aRWIfN0OOML98.oW8yJG-PyjryvJ9V85JSgGyn_LChbo2Pos3f_ae2Uu4%22,%22validationRecord%22:%5B%7B%22hostname%22:%22projekt.domain.com%22,%22port%22:%22443%22,%22addressesResolved%22:%5B%2295.129.96.133%22%5D,%22addressUsed%22:%2295.129.96.133%22%7D%5D%7D,%7B%22type%22:%22http-01%22,%22status%22:%22pending%22,%22uri%22:%22https://acme-v01.api.letsencrypt.org/acme/challenge/O0p-Pqrwj5RBgADE2JQMeSeDcQq7mDLItFx5m9U0nfk/1214600%22,%22token%22:%223X51K50Ntc3zGiQQbc8bhoozgmMBpovATau8kzeGCxY%22%7D%5D,%22combinations)”:[[0],[1]]}' 2015-12-07 19:28:49,174:INFO:letsencrypt.reporter:Reporting to user: The following ‘urn:acme:error:connection’ errors were reported by the server: Domains: [projekt.domain.com](http://projekt.domain.com) Error: The server could not connect to the client for DV 2015-12-07 19:28:49,175:INFO:letsencrypt.auth\_handler:Cleaning up challenges 2015-12-07 19:28:49,496:DEBUG:letsencrypt.cli:Exiting abnormally: Traceback (most recent call last): File “/root/.local/share/letsencrypt/bin/letsencrypt”, line 11, in sys.exit(main()) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 1283, in main return args.func(args, config, plugins) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 470, in run lineage = \_auth\_from\_domains(le\_client, config, domains) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 336, in \_auth\_from\_domains lineage = le\_client.obtain\_and\_enroll\_certificate(domains) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 283, in obtain\_and\_enroll\_certificate certr, chain, key, \_ = self.obtain\_certificate(domains) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 266, in obtain\_certificate return self.\_obtain\_certificate(domains, csr) + (key, csr) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 224, in \_obtain\_certificate authzr = self.auth\_handler.get\_authorizations(domains) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth\_handler.py”, line 84, in get\_authorizations self.\_respond(cont\_resp, dv\_resp, best\_effort) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth\_handler.py”, line 142, in \_respond self.\_poll\_challenges(chall\_update, best\_effort) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth\_handler.py”, line 204, in \_poll\_challenges raise errors.FailedChallenges(all\_failed\_achalls) FailedChallenges: Failed authorization procedure. [projekt.domain.com](http://projekt.domain.com) (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client for DV :: Failed to connect to host for DVSNI challenge ---
**Author:** ![wolfie](https://avatars.discourse-cdn.com/v4/letter/w/c2a13f/32.png) [@wolfie](https://community.letsencrypt.org/u/wolfie)\ **Post date:** [December 7, 2015, 7:40pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/5 "2015-12-07T19:40:19Z")
The command run is: ./letsencrypt-auto --server [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory) auth --text -v Program output: Updating letsencrypt and virtual environment dependencies… Requirement already up-to-date: setuptools in /root/.local/share/letsencrypt/lib/python2.7/site-packages Requirement already up-to-date: pip in /root/.local/share/letsencrypt/lib/python2.7/site-packages Requirement already up-to-date: letsencrypt in /root/.local/share/letsencrypt/lib/python2.7/site-packages Requirement already up-to-date: letsencrypt-apache in /root/.local/share/letsencrypt/lib/python2.7/site-packages Requirement already up-to-date: acme==0.1.0 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: setuptools in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: python2-pythondialog\>=3.2.2rc1 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: PyOpenSSL in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: requests in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: parsedatetime in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: configobj in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: pytz in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: psutil\>=2.1.0 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: six in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: cryptography\>=0.7 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: zope.interface in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: zope.component in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: mock in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: ConfigArgParse in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: pyrfc3339 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt) Requirement already up-to-date: python-augeas in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from letsencrypt-apache) Requirement already up-to-date: pyasn1 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from acme==0.1.0-\>letsencrypt) Requirement already up-to-date: ndg-httpsclient in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from acme==0.1.0-\>letsencrypt) Requirement already up-to-date: werkzeug in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from acme==0.1.0-\>letsencrypt) Requirement already up-to-date: idna\>=2.0 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cryptography\>=0.7-\>letsencrypt) Requirement already up-to-date: enum34 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cryptography\>=0.7-\>letsencrypt) Requirement already up-to-date: ipaddress in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cryptography\>=0.7-\>letsencrypt) Requirement already up-to-date: cffi\>=1.1.0 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cryptography\>=0.7-\>letsencrypt) Requirement already up-to-date: zope.event in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from zope.component-\>letsencrypt) Requirement already up-to-date: funcsigs in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from mock-\>letsencrypt) Requirement already up-to-date: pbr\>=0.11 in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from mock-\>letsencrypt) Requirement already up-to-date: pycparser in /root/.local/share/letsencrypt/lib/python2.7/site-packages (from cffi\>=1.1.0-\>cryptography\>=0.7-\>letsencrypt) Running with virtualenv: /root/.local/share/letsencrypt/bin/letsencrypt --server [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory) auth --text -v 2015-12-07 14:36:25,879:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log ## How would you like to authenticate with the Let’s Encrypt CA? ## 1: Apache Web Server - Alpha (apache) 2: Automatically use a temporary webserver (standalone) Select the appropriate number [1-2] then [enter] (press ‘c’ to cancel): 1 2015-12-07 14:36:31,012:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) Please enter in your domain name(s) (comma and/or space separated) (Enter 'c’ to cancel):mail.hastingstechs.com 2015-12-07 14:36:44,068:INFO:letsencrypt.crypto\_util:Generating key (2048 bits): /etc/letsencrypt/keys/0007\_key-letsencrypt.pem 2015-12-07 14:36:44,080:INFO:letsencrypt.crypto\_util:Creating CSR: /etc/letsencrypt/csr/0007\_csr-letsencrypt.pem 2015-12-07 14:36:44,082:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 14:36:44,368:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 14:36:44,715:INFO:letsencrypt.auth\_handler:Performing the following challenges: 2015-12-07 14:36:44,716:INFO:letsencrypt.auth\_handler:tls-sni-01 challenge for [mail.hastingstechs.com](http://mail.hastingstechs.com) ## We were unable to find a vhost with a ServerName or Address of [mail.hastingstechs.com](http://mail.hastingstechs.com). Which virtual host would you like to choose? ## 1: default-ssl.conf | | HTTPS | 2: default-ssl.conf.old | | HTTPS | 3: 000-default.conf | | | Enabled 4: 000-default-le-ssl.conf | | HTTPS | Enabled Select the appropriate number [1-4] then [enter] (press ‘c’ to cancel): 1 2015-12-07 14:36:51,398:INFO:letsencrypt.auth\_handler:Waiting for verification… 2015-12-07 14:36:51,407:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 14:36:54,775:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 14:36:55,233:INFO:letsencrypt.reporter:Reporting to user: The following ‘urn:acme:error:connection’ errors were reported by the server: Domains: [mail.hastingstechs.com](http://mail.hastingstechs.com) Error: The server could not connect to the client for DV 2015-12-07 14:36:55,234:INFO:letsencrypt.auth\_handler:Cleaning up challenges Failed authorization procedure. [mail.hastingstechs.com](http://mail.hastingstechs.com) (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client for DV :: Failed to connect to host for DVSNI challenge IMPORTANT NOTES: - The following ‘urn:acme:error:connection’ errors were reported by the server: Error Logs: 2015-12-07 19:36:25,879:DEBUG:letsencrypt.cli:Root logging level set at 20 2015-12-07 19:36:25,879:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2015-12-07 19:36:25,879:DEBUG:letsencrypt.cli:letsencrypt version: 0.1.0 2015-12-07 19:36:25,879:DEBUG:letsencrypt.cli:Arguments: [’–server’, ‘[https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)’, ‘–text’, ‘-v’] 2015-12-07 19:36:25,879:DEBUG:letsencrypt.cli:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone) 2015-12-07 19:36:25,880:DEBUG:letsencrypt.cli:Requested authenticator None and installer None 2015-12-07 19:36:27,085:DEBUG:letsencrypt.plugins.disco:Other error:(PluginEntryPoint#webroot): --webroot-path must be set Traceback (most recent call last): File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/plugins/disco.py”, line 103, in prepare self.\_initialized.prepare() File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/plugins/webroot.py”, line 54, in prepare self.option\_name(“path”))) PluginError: --webroot-path must be set 2015-12-07 19:36:27,089:DEBUG:letsencrypt.display.ops:Multiple candidate plugins: \* apache Description: Apache Web Server - Alpha Interfaces: IAuthenticator, IInstaller, IPlugin Entry point: apache = letsencrypt\_apache.configurator:ApacheConfigurator Initialized: \ Prep: True - standalone Description: Automatically use a temporary webserver Interfaces: IAuthenticator, IPlugin Entry point: standalone = letsencrypt.plugins.standalone:Authenticator Initialized: \ Prep: True 2015-12-07 19:36:30,951:DEBUG:letsencrypt.cli:Selected authenticator \ and installer None 2015-12-07 19:36:30,988:DEBUG:letsencrypt.cli:Picked account: \ 2015-12-07 19:36:31,008:DEBUG:root:Sending GET request to [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory). args: (), kwargs: {} 2015-12-07 19:36:31,012:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 19:36:31,492:DEBUG:requests.packages.urllib3.connectionpool:“GET /directory HTTP/1.1” 200 263 2015-12-07 19:36:31,494:DEBUG:root:Received \. Headers: {‘Content-Length’: ‘263’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:31 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:31 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘RdysFjRAqa-5K9dF51gvkM6mtA0bRLk9HOP4D7sVrpI’}. Content: '{“new-authz”:“[https://acme-v01.api.letsencrypt.org/acme/new-authz",“new-cert”:“https://acme-v01.api.letsencrypt.org/acme/new-cert”,“new-reg”:“https://acme-v01.api.letsencrypt.org/acme/new-reg”,“revoke-cert”:"https://acme-v01.api.letsencrypt.org/acme/revoke-cert](https://acme-v01.api.letsencrypt.org/acme/new-authz%22,%22new-cert%22:%22https://acme-v01.api.letsencrypt.org/acme/new-cert%22,%22new-reg%22:%22https://acme-v01.api.letsencrypt.org/acme/new-reg%22,%22revoke-cert%22:%22https://acme-v01.api.letsencrypt.org/acme/revoke-cert)”}' 2015-12-07 19:36:31,495:DEBUG:acme.client:Received response \ (headers: {‘Content-Length’: ‘263’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:31 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:31 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘RdysFjRAqa-5K9dF51gvkM6mtA0bRLk9HOP4D7sVrpI’}): ‘{“new-authz”:“[https://acme-v01.api.letsencrypt.org/acme/new-authz",“new-cert”:“https://acme-v01.api.letsencrypt.org/acme/new-cert”,“new-reg”:“https://acme-v01.api.letsencrypt.org/acme/new-reg”,“revoke-cert”:"https://acme-v01.api.letsencrypt.org/acme/revoke-cert](https://acme-v01.api.letsencrypt.org/acme/new-authz%22,%22new-cert%22:%22https://acme-v01.api.letsencrypt.org/acme/new-cert%22,%22new-reg%22:%22https://acme-v01.api.letsencrypt.org/acme/new-reg%22,%22revoke-cert%22:%22https://acme-v01.api.letsencrypt.org/acme/revoke-cert)”}‘ 2015-12-07 19:36:31,495:DEBUG:letsencrypt.display.ops:No installer, picking names manually 2015-12-07 19:36:44,068:INFO:letsencrypt.crypto\_util:Generating key (2048 bits): /etc/letsencrypt/keys/0007\_key-letsencrypt.pem 2015-12-07 19:36:44,080:INFO:letsencrypt.crypto\_util:Creating CSR: /etc/letsencrypt/csr/0007\_csr-letsencrypt.pem 2015-12-07 19:36:44,080:DEBUG:letsencrypt.client:CSR: CSR(file=’/etc/letsencrypt/csr/0007\_csr-letsencrypt.pem’, data='0\x82\x02\x9a0\x82\x01\x82\x02\x01\x000!1\x1f0\x1d\x06\x03U\x04\x03\x0c\x16mail.hastingstechs.com0\x82\x01"0\r\x06\t\*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc0qX\x96\x07x\xcd\xec\ng\xaa\xf1\xd1\x91^\x01\xf8\x9a$\x94!OK\xba\x06\xa7\xcb)b/\xcf\xf8\x9b1\xe4\xbe\xddCj\xef\xca\xea\xd1\x1cgmY\xc13\x9b\xb8\xd2\xcdAK\x06\xc0\x8d4\xc9\xa8\xa4\xe3\xe9\xc8\xbc\x1a\xf3\x1b\x17\xe0\x04H6\xaaV\x9b\xe7\xc4f\x1e\xf5\xb8\xea\xe1\xdbR\x85\x87\x1dI_u\xa3\x83=un\xe4\x88\xc0&\xc3\x86-E\x14[\x1f\xaf\xbb3a\<\x9c?\x94\x85\xb8\xd3\xeak\xd4V\xf9\xab\x1b\x07zhx\xbf\xce\x9b\x19’;s\x04\x1c7T\x14l\x87\xde\x06Q0\x9b\xfa\xa8\xe6\xe4\x89\x87n\x9d@\xf0Kq\xc2V\xffX\x1b\_\xd4\xf0\x81$\x86\xb5\x1dro\x0c\xb8q^\xe0\xd0v\x82+L\xd7\xdb\xbe\xe0\xd5f\rF\x8bX\x18^`\x0ft\xa5\x94\xa4\x81\xceF%\xa6\xd6\xf6\x1d\x033\x1b)$\x9c\x86\xa4\xd1\xea\x01\xe9\xe1\xc9\xb27\xd2\xfd\x05\x84\x96\xd0E:\xc6Q|{\xb2\xfb\x08Js\x89N6\\T\x17:0\xe3\x91\x02\x03\x01\x00\x01\xa0402\x06\t*\x86H\x86\xf7\r\x01\t\x0e1%0#0!\x06\x03U\x1d\x11\x04\x1a0\x18\x82\x16mail.hastingstechs.com0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00\xa4WO\xc0\xa4\x1es$FOA\xca\xad\x14\xe4\xa6J\xb7\xdd\xd0},\xae\x99\xbc\n\x85\xe3lQi\xaa\xc3\x97\x0c\xb4w<\xc8l\xe7G\xfb\x1e\x06[Q\x02\xdd\xcb\xf2\x11\x15&\xc1\xb5\xdd\x00\x04\xef\xb8\xa9\x18\xf90\xaa\xebaN\x8a\x92\x94\xa6\xf2\x07\xd3\xb3K\x84\xacwsI\x0b\xe0\x14\x03\xfeJ\x9dN\x97(!\xeatV8\xfa8\xe7*\xde_\x03\x8c\xcc\xd6s\xe4g\xa8\x92l\xc5\xaa\x12\xfc\xc8\x08\xb1/\x91\x9fb\x90F\xd1\xaeI\xca\xa0^2\x0f\x02|m\xb0\x06\xe6\xe5@\xbc\xad\xa2%\xa2\xad\xf3\x91\xd3\xdaC5\xbc\xf0\xfcI:1k\xa9sK\xe9\x99~h\xd9\xb8\x91F\'\xc5\xeb#J\xc7\x1f`|\xaa_`W\xc1/6\xf9\xc3\xa8&o\r\xca\x838\xde\xc0\x9d\x95\xc3\xed\x1c\xab\r85\xaey~%\x8b-\xc1\xca\x19c3\x97o*&\x8c\x88\x04|\xf5\xb8_\x15&eK\xf0\x17\x92\xd1\xa6\x02\n\xed\xf4\xe0\xe2\xc2y\xaaW\x11\x10\x10g4\xf3', form='der'), domains: ['mail.hastingstechs.com'] 2015-12-07 19:36:44,081:DEBUG:root:Requesting fresh nonce 2015-12-07 19:36:44,081:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {} 2015-12-07 19:36:44,082:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org 2015-12-07 19:36:44,350:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0 2015-12-07 19:36:44,352:DEBUG:root:Received . Headers: {'Content-Length': '0', 'Pragma': 'no-cache', 'Expires': 'Mon, 07 Dec 2015 19:36:44 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Allow': 'POST', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 07 Dec 2015 19:36:44 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': 'enrlqI5WAaVzYl4v6PMeZyVnHGD1gluniJvU4soHEmw'}. Content: '' 2015-12-07 19:36:44,352:DEBUG:acme.client:Storing nonce: 'zz\xe5\xa8\x8eV\x01\xa5sb^/\xe8\xf3\x1eg%g\x1c`\xf5\x82[\xa7\x88\x9b\xd4\xe2\xca\x07\x12l’ 2015-12-07 19:36:44,352:DEBUG:acme.jose.json\_util:Omitted empty fields: expires=None, challenges=None, status=None, combinations=None 2015-12-07 19:36:44,353:DEBUG:acme.client:Serialized JSON: {“identifier”: {“type”: “dns”, “value”: “[mail.hastingstechs.com](http://mail.hastingstechs.com)”}, “resource”: “new-authz”} 2015-12-07 19:36:44,354:DEBUG:acme.jose.json\_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None 2015-12-07 19:36:44,361:DEBUG:acme.jose.json\_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None 2015-12-07 19:36:44,361:DEBUG:root:Sending POST request to [https://acme-v01.api.letsencrypt.org/acme/new-authz](https://acme-v01.api.letsencrypt.org/acme/new-authz). args: (), kwargs: {‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “6tVt4OfPhc33n-UT54HV\_M7AWtI09gh2eFzWcS6rwLHMVG-LVjsQuPSX47OE34AaXGsKJIRAVQdSAeRDPX9ti3yGi-9eq\_vtfEvUty4sLJHbxwywCzWyXT0ztjegAzxfeScndleqn9b6QSIFMGU7nwxY9oIw5oYNIPyHkBhwDfkSTlv\_G88LEYWuvcjD3mGfLmiZ4qvXF44w0KKSA7MxUk4yUwWOt6El0oUC55eRtBIiR-3S1f\_uaU7eaJBjomYEB0ArC04TIX6Ynt8-1FTgJjtATlaVUuXNpuPZDuXR3pFQh50lolnwCq2eM7Q8BRjj7uBwK2paCs4agKG102lhZw”}}, “protected”: “eyJub25jZSI6ICJlbnJscUk1V0FhVnpZbDR2NlBNZVp5Vm5IR0QxZ2x1bmlKdlU0c29IRW13In0”, “payload”: “eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJtYWlsLmhhc3RpbmdzdGVjaHMuY29tIn0sICJyZXNvdXJjZSI6ICJuZXctYXV0aHoifQ”, “signature”: “lZ5tiKSXanbPivGd5v5ee8sNg3sipWexmlXakkfZx4iHB3eniND6Fsy8B3g6FIGID0hQlFbMAAkrPwPPAWQlXa4\_uihqMhG13m4ddkynM4\_ffMjxMPL9iXzLA\_DOkDyjVmhNA87c5-WovTMc\_cC\_n\_gKX7oSjW1ELiqo5\_aAb2hA2vqGrzxdh8tWifpdLAQt2g4zQ9Zhur8PtYaGmqHFY8orA-jsQZsf7bPmhy7400655ukhLCBk5exOi3Dbm44bG8ksiWWKV1lD5ujgBzznEOS26kTfXzAq88-PiZp\_jUUCwgCoOBmA5UQHHqxJovYyRyAsI8ElozhZgvmYGqjO1g”}’} 2015-12-07 19:36:44,368:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 19:36:44,711:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/new-authz HTTP/1.1” 201 575 2015-12-07 19:36:44,713:DEBUG:root:Received \. Headers: {‘Content-Length’: ‘575’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:44 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert);rel=“next”’, ‘Location’: ‘[https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow](https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow)’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:44 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘EMuo3dBIA4MMuSGUYnT6ALTfcBRzcvsdc1N1WQwbXlU’}. Content: '{“identifier”:{“type”:“dns”,“value”:“[mail.hastingstechs.com](http://mail.hastingstechs.com)”},“status”:“pending”,“expires”:“2015-12-14T19:36:44.632200544Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215477",“token”:“23LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU”},{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478”,“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k”}],"combinations](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215477%22,%22token%22:%2223LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU%22%7D,%7B%22type%22:%22tls-sni-01%22,%22status%22:%22pending%22,%22uri%22:%22https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478%22,%22token%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k%22%7D%5D,%22combinations)”:[[0],[1]]}' 2015-12-07 19:36:44,713:DEBUG:acme.client:Storing nonce: '\x10\xcb\xa8\xdd\xd0H\x03\x83\x0c\xb9!\x94bt\xfa\x00\xb4\xdfp\x14sr\xfb\x1dsSuY\x0c\x1b^U’ 2015-12-07 19:36:44,714:DEBUG:acme.client:Received response \ (headers: {‘Content-Length’: ‘575’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:44 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert);rel=“next”’, ‘Location’: ‘[https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow](https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow)’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:44 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘EMuo3dBIA4MMuSGUYnT6ALTfcBRzcvsdc1N1WQwbXlU’}): '{“identifier”:{“type”:“dns”,“value”:“[mail.hastingstechs.com](http://mail.hastingstechs.com)”},“status”:“pending”,“expires”:“2015-12-14T19:36:44.632200544Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215477",“token”:“23LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU”},{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478”,“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k”}],"combinations](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215477%22,%22token%22:%2223LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU%22%7D,%7B%22type%22:%22tls-sni-01%22,%22status%22:%22pending%22,%22uri%22:%22https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478%22,%22token%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k%22%7D%5D,%22combinations)”:[[0],[1]]}' 2015-12-07 19:36:44,715:INFO:letsencrypt.auth\_handler:Performing the following challenges: 2015-12-07 19:36:44,716:INFO:letsencrypt.auth\_handler:tls-sni-01 challenge for [mail.hastingstechs.com](http://mail.hastingstechs.com) 2015-12-07 19:36:44,921:DEBUG:letsencrypt\_apache.configurator:No Listen 443 directive found. Setting the Apache Server to Listen on port 443 2015-12-07 19:36:48,057:DEBUG:letsencrypt.reverter:Creating backup of /etc/apache2/ports.conf 2015-12-07 19:36:48,057:DEBUG:letsencrypt.reverter:Creating backup of /etc/apache2/apache2.conf 2015-12-07 19:36:51,398:INFO:letsencrypt.auth\_handler:Waiting for verification… 2015-12-07 19:36:51,399:DEBUG:acme.client:Serialized JSON: {“keyAuthorization”: “oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo”, “type”: “tls-sni-01”, “resource”: “challenge”} 2015-12-07 19:36:51,400:DEBUG:acme.jose.json\_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None 2015-12-07 19:36:51,405:DEBUG:acme.jose.json\_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None 2015-12-07 19:36:51,406:DEBUG:root:Sending POST request to [https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478). args: (), kwargs: {‘data’: ‘{“header”: {“alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “6tVt4OfPhc33n-UT54HV\_M7AWtI09gh2eFzWcS6rwLHMVG-LVjsQuPSX47OE34AaXGsKJIRAVQdSAeRDPX9ti3yGi-9eq\_vtfEvUty4sLJHbxwywCzWyXT0ztjegAzxfeScndleqn9b6QSIFMGU7nwxY9oIw5oYNIPyHkBhwDfkSTlv\_G88LEYWuvcjD3mGfLmiZ4qvXF44w0KKSA7MxUk4yUwWOt6El0oUC55eRtBIiR-3S1f\_uaU7eaJBjomYEB0ArC04TIX6Ynt8-1FTgJjtATlaVUuXNpuPZDuXR3pFQh50lolnwCq2eM7Q8BRjj7uBwK2paCs4agKG102lhZw”}}, “protected”: “eyJub25jZSI6ICJFTXVvM2RCSUE0TU11U0dVWW5UNkFMVGZjQlJ6Y3ZzZGMxTjFXUXdiWGxVIn0”, “payload”: “eyJrZXlBdXRob3JpemF0aW9uIjogIm9TZWVOa2ZWTW01LVhtNW9BdzdMVDQ0UVFfZE8wNGlLbDBjR3lleXQ2OGsudkxtWW5DNnBZOTh4MFc1bjlzWS03N244eU5QeHNRZk1reHdFTHd4T3BxbyIsICJ0eXBlIjogInRscy1zbmktMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0”, “signature”: “BgqXj7eHgZsY4yyijFxpk7\_1u9jR5P0Oh0R12H6KW24TEzvYqtEdnqTJRJ\_Ir3gNR7YiBG70lwrp1ukULGGJhHI21vGAEarArlczuNZgSInQ\_yav2xHUuXG0nRBc1RBnfc8rKG9bAv8FovSFFVh7F525eSatBZxZtXkMP1KkhpheM5gQoPGdJE4tDWt-govdeoNgueDjtJhJ5L0YTkCP0gpCTTwN2RalyhLo5hELp-wlv150Ngmvyt2hC\_NlaPjY2wW4\_pKBiYL8SPYL8R1nvLen1cv838Hrwf6\_n8W6pRGZ4d5oHkMiAOLHI-k7Hqc4wu2qJ-04H0snV67XRRzrcA”}’} 2015-12-07 19:36:51,407:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 19:36:51,768:DEBUG:requests.packages.urllib3.connectionpool:“POST /acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478 HTTP/1.1” 202 315 2015-12-07 19:36:51,770:DEBUG:root:Received \. Headers: {‘Content-Length’: ‘315’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:51 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow](https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow);rel=“up”’, ‘Location’: ‘[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478)’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:51 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘nTggX3vQLol5tEi\_7XUVZd6Iofhy\_YMhsA9RVcIyB1E’}. Content: '{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478",“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k”,“keyAuthorization”:"oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478%22,%22token%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k%22,%22keyAuthorization%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo)”}' 2015-12-07 19:36:51,771:DEBUG:acme.client:Storing nonce: '\x9d8 \_{\xd0.\x89y\xb4H\xbf\xedu\x15e\xde\x88\xa1\xf8r\xfd\x83!\xb0\x0fQU\xc22\x07Q’ 2015-12-07 19:36:51,771:DEBUG:acme.client:Received response \ (headers: {‘Content-Length’: ‘315’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:51 GMT’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow](https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow);rel=“up”’, ‘Location’: ‘[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478)’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:51 GMT’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘nTggX3vQLol5tEi\_7XUVZd6Iofhy\_YMhsA9RVcIyB1E’}): '{“type”:“tls-sni-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478",“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k”,“keyAuthorization”:"oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478%22,%22token%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k%22,%22keyAuthorization%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo)”}' 2015-12-07 19:36:54,774:DEBUG:root:Sending GET request to [https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow](https://acme-v01.api.letsencrypt.org/acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow). args: (), kwargs: {} 2015-12-07 19:36:54,775:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): [acme-v01.api.letsencrypt.org](http://acme-v01.api.letsencrypt.org) 2015-12-07 19:36:55,229:DEBUG:requests.packages.urllib3.connectionpool:“GET /acme/authz/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow HTTP/1.1” 200 910 2015-12-07 19:36:55,231:DEBUG:root:Received \. Headers: {‘Content-Length’: ‘910’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:55 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert);rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:55 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘B5hpNybhDKgpGjeax-7NvdlgjyLU9\_8qDgwFPnIZeiE’}. Content: '{“identifier”:{“type”:“dns”,“value”:“[mail.hastingstechs.com](http://mail.hastingstechs.com)”},“status”:“invalid”,“expires”:“2015-12-14T19:36:44Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215477",“token”:“23LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU”},{“type”:“tls-sni-01”,“status”:“invalid”,“error”:{“type”:“urn:acme:error:connection”,“detail”:"Failed](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215477%22,%22token%22:%2223LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU%22%7D,%7B%22type%22:%22tls-sni-01%22,%22status%22:%22invalid%22,%22error%22:%7B%22type%22:%22urn:acme:error:connection%22,%22detail%22:%22Failed) to connect to host for DVSNI challenge”},“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478",“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k”,“keyAuthorization”:“oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo”,“validationRecord”:[{“hostname”:“mail.hastingstechs.com”,“port”:“443”,“addressesResolved”:[“135.0.48.8”],“addressUsed”:“135.0.48.8”}]}],"combinations](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478%22,%22token%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k%22,%22keyAuthorization%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo%22,%22validationRecord%22:%5B%7B%22hostname%22:%22mail.hastingstechs.com%22,%22port%22:%22443%22,%22addressesResolved%22:%5B%22135.0.48.8%22%5D,%22addressUsed%22:%22135.0.48.8%22%7D%5D%7D%5D,%22combinations)”:[[0],[1]]}' 2015-12-07 19:36:55,232:DEBUG:acme.client:Received response \ (headers: {‘Content-Length’: ‘910’, ‘Expires’: ‘Mon, 07 Dec 2015 19:36:55 GMT’, ‘Strict-Transport-Security’: ‘max-age=604800’, ‘Server’: ‘nginx’, ‘Connection’: ‘keep-alive’, ‘Link’: ‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert);rel=“next”’, ‘Pragma’: ‘no-cache’, ‘Cache-Control’: ‘max-age=0, no-cache, no-store’, ‘Date’: ‘Mon, 07 Dec 2015 19:36:55 GMT’, ‘X-Frame-Options’: ‘DENY’, ‘Content-Type’: ‘application/json’, ‘Replay-Nonce’: ‘B5hpNybhDKgpGjeax-7NvdlgjyLU9\_8qDgwFPnIZeiE’}): '{“identifier”:{“type”:“dns”,“value”:“[mail.hastingstechs.com](http://mail.hastingstechs.com)”},“status”:“invalid”,“expires”:“2015-12-14T19:36:44Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215477",“token”:“23LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU”},{“type”:“tls-sni-01”,“status”:“invalid”,“error”:{“type”:“urn:acme:error:connection”,“detail”:"Failed](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215477%22,%22token%22:%2223LerhQRPJKtTS0BbaEvJ--QnP1B4IE8ZpAsYNQ7NrU%22%7D,%7B%22type%22:%22tls-sni-01%22,%22status%22:%22invalid%22,%22error%22:%7B%22type%22:%22urn:acme:error:connection%22,%22detail%22:%22Failed) to connect to host for DVSNI challenge”},“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4\_40ii5\_ow/1215478",“token”:“oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k”,“keyAuthorization”:“oSeeNkfVMm5-Xm5oAw7LT44QQ\_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo”,“validationRecord”:[{“hostname”:“mail.hastingstechs.com”,“port”:“443”,“addressesResolved”:[“135.0.48.8”],“addressUsed”:“135.0.48.8”}]}],"combinations](https://acme-v01.api.letsencrypt.org/acme/challenge/JXn5g4uDkEda-q9DKyYF-ThlRXDpKJdWS4_40ii5_ow/1215478%22,%22token%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k%22,%22keyAuthorization%22:%22oSeeNkfVMm5-Xm5oAw7LT44QQ_dO04iKl0cGyeyt68k.vLmYnC6pY98x0W5n9sY-77n8yNPxsQfMkxwELwxOpqo%22,%22validationRecord%22:%5B%7B%22hostname%22:%22mail.hastingstechs.com%22,%22port%22:%22443%22,%22addressesResolved%22:%5B%22135.0.48.8%22%5D,%22addressUsed%22:%22135.0.48.8%22%7D%5D%7D%5D,%22combinations)”:[[0],[1]]}' 2015-12-07 19:36:55,233:INFO:letsencrypt.reporter:Reporting to user: The following ‘urn:acme:error:connection’ errors were reported by the server: Domains: [mail.hastingstechs.com](http://mail.hastingstechs.com) Error: The server could not connect to the client for DV 2015-12-07 19:36:55,234:INFO:letsencrypt.auth\_handler:Cleaning up challenges 2015-12-07 19:36:55,722:DEBUG:letsencrypt.cli:Exiting abnormally: Traceback (most recent call last): File “/root/.local/share/letsencrypt/bin/letsencrypt”, line 11, in sys.exit(main()) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 1283, in main return args.func(args, config, plugins) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 512, in obtain\_cert \_auth\_from\_domains(le\_client, config, domains) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/cli.py”, line 336, in \_auth\_from\_domains lineage = le\_client.obtain\_and\_enroll\_certificate(domains) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 283, in obtain\_and\_enroll\_certificate certr, chain, key, \_ = self.obtain\_certificate(domains) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 266, in obtain\_certificate return self.\_obtain\_certificate(domains, csr) + (key, csr) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/client.py”, line 224, in \_obtain\_certificate authzr = self.auth\_handler.get\_authorizations(domains) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth\_handler.py”, line 84, in get\_authorizations self.\_respond(cont\_resp, dv\_resp, best\_effort) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth\_handler.py”, line 142, in \_respond self.\_poll\_challenges(chall\_update, best\_effort) File “/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/letsencrypt/auth\_handler.py”, line 204, in \_poll\_challenges raise errors.FailedChallenges(all\_failed\_achalls) FailedChallenges: Failed authorization procedure. [mail.hastingstechs.com](http://mail.hastingstechs.com) (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client for DV :: Failed to connect to host for DVSNI challenge ---
**Author:** ![pfg](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/pfg/32/1924_2.png) [@pfg](https://community.letsencrypt.org/u/pfg)\ **Post date:** [December 7, 2015, 7:52pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/6 "2015-12-07T19:52:40Z")
> [@wolfie](#): > > We were unable to find a vhost with a ServerName or Address of mail.hastingstechs.com.Which virtual host would you like to choose? > > 1: default-ssl.conf | | HTTPS |2: default-ssl.conf.old | | HTTPS |3: 000-default.conf | | | Enabled4: 000-default-le-ssl.conf | | HTTPS | Enabled > > Select the appropriate number [1-4] then [enter] (press 'c' to cancel): 1 Are you sure default-ssl.conf is the VHost that handles [https://mail.hastingstechs.com](https://mail.hastingstechs.com)? The client indicates it's disabled. With tls-sni-01, Let's Encrypt has to modify the correct VHost configuration to solve the challenge - this might not work if you pick the wrong VHost here. If you can live with a minute of downtime, I would recommend using the apache plugin in standalone mode, where Let's Encrypt takes over port 80 for a short period to serve challenge files. Another option would be using the [webroot](https://letsencrypt.readthedocs.org/en/latest/using.html#webroot) plugin and do the apache configuration on your own. This would avoid any downtime. ---
**Author:** ![pfg](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/pfg/32/1924_2.png) [@pfg](https://community.letsencrypt.org/u/pfg)\ **Post date:** [December 7, 2015, 8:00pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/7 "2015-12-07T20:00:37Z")
> [@sixberk](#): > > 2015-12-07 19:28:22,290:DEBUG:letsencrypt.cli:Arguments: ['-webroot', '-w', '/home/www.domain.com/', '--apache'] I don't think you can combine [--apache](https://letsencrypt.readthedocs.org/en/latest/using.html#apache) with [--webroot](https://letsencrypt.readthedocs.org/en/latest/using.html#webroot) - they're separate plugins. The apache plugin supports tls-sni-01 or standalone mode (where letsencrypt spawns a web server temporarily to serve challenge files). If you would like to use webroot, call the client with `certonly --webroot -w /home/www.domain.com/` and configure apache manually. ---
**Author:** ![wolfie](https://avatars.discourse-cdn.com/v4/letter/w/c2a13f/32.png) [@wolfie](https://community.letsencrypt.org/u/wolfie)\ **Post date:** [December 7, 2015, 8:01pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/8 "2015-12-07T20:01:26Z")
Standalone was able to pull the certs but does not appear to have applied them to the config for apache. This may be an issue with the way zentyal is built. I was very likely pointing to the wrong config file. Using one of the enabled ones results in the same error. Thank you for the assistance. ---
**Author:** ![sixberk](https://avatars.discourse-cdn.com/v4/letter/s/258eb7/32.png) [@sixberk](https://community.letsencrypt.org/u/sixberk)\ **Post date:** [December 7, 2015, 8:08pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/9 "2015-12-07T20:08:17Z")
I tried witout webroot only --apache and same result ---
**Author:** ![pfg](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/pfg/32/1924_2.png) [@pfg](https://community.letsencrypt.org/u/pfg)\ **Post date:** [December 7, 2015, 8:16pm UTC](https://community.letsencrypt.org/t/server-is-unable-to-connect-to-the-client/6199/10 "2015-12-07T20:16:33Z")
I tried connecting to port 443 (https) on the IP in your log (95.129.96.133) but was unable to. With tls-sni-01 Let’s Encrypt needs to be able to connect via https from their CA server. Make sure no firewall rules are interfering or switch to a plugin that only requires HTTP access (e.g. webroot or apache in standalone mode).