The certificate cannot be obtained, indicating that it has been intercepted

2025-01-15 08:34:25,993:DEBUG:acme.client:Storing nonce: 5VsalEMJrfiSvw8hJ7Pf6x-zK33V7R9CFZScdcNyNiC4-R7GmgQ

2025-01-15 08:34:25,994:INFO:certbot._internal.auth_handler:Challenge failed for domain

2025-01-15 08:34:25,994:INFO:certbot._internal.auth_handler:http-01 challenge for

2025-01-15 08:34:25,995:DEBUG:certbot._internal.display.obj:Notifying user:

Certbot failed to authenticate some domains (authenticator: manual). The Certificate Authority reported these problems:

Domain:

Type: connection

Detail: 47.88.8.248: Fetching http://xxx.xxx.xxx/.well-known/acme-challenge/0UM150oyeFQSCKe_rP5zJcnzq5oXdzwWU69-SDmy2gI: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to verify the manually created challenge files. Ensure that you created these in the correct location.

2025-01-15 08:34:25,995:DEBUG:certbot._internal.error_handler:Encountered exception:

Traceback (most recent call last):

File "/usr/lib/python3/dist-packages/certbot/_internal/auth_handler.py", line 90, in handle_authorizations

self._poll_authorizations(authzrs, max_retries, best_effort)

File "/usr/lib/python3/dist-packages/certbot/_internal/auth_handler.py", line 178, in _poll_authorizations

raise errors.AuthorizationError('Some challenges have failed.')

certbot.errors.AuthorizationError: Some challenges have failed.

2025-01-15 08:34:25,995:DEBUG:certbot._internal.error_handler:Calling registered functions

2025-01-15 08:34:25,996:INFO:certbot._internal.auth_handler:Cleaning up challenges

2025-01-15 08:34:25,996:DEBUG:certbot._internal.log:Exiting abnormally:

Traceback (most recent call last):

File "/usr/bin/certbot", line 33, in

sys.exit(load_entry_point('certbot==1.21.0', 'console_scripts', 'certbot')())

File "/usr/lib/python3/dist-packages/certbot/main.py", line 15, in main

return internal_main.main(cli_args)

File "/usr/lib/python3/dist-packages/certbot/_internal/main.py", line 1574, in main

return config.func(config, plugins)

File "/usr/lib/python3/dist-packages/certbot/_internal/main.py", line 1434, in certonly

lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)

File "/usr/lib/python3/dist-packages/certbot/_internal/main.py", line 122, in _get_and_save_cert

renewal.renew_cert(config, domains, le_client, lineage)

File "/usr/lib/python3/dist-packages/certbot/_internal/renewal.py", line 335, in renew_cert

new_cert, new_chain, new_key, _ = le_client.obtain_certificate(domains, new_key)

File "/usr/lib/python3/dist-packages/certbot/_internal/client.py", line 389, in obtain_certificate

orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)

File "/usr/lib/python3/dist-packages/certbot/_internal/client.py", line 439, in _get_order_and_authorizations

authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)

File "/usr/lib/python3/dist-packages/certbot/_internal/auth_handler.py", line 90, in handle_authorizations

self._poll_authorizations(authzrs, max_retries, best_effort)

File "/usr/lib/python3/dist-packages/certbot/_internal/auth_handler.py", line 178, in _poll_authorizations

raise errors.AuthorizationError('Some challenges have failed.')

certbot.errors.AuthorizationError: Some challenges have failed.

2025-01-15 08:34:25,997:ERROR:certbot._internal.log:Some challenges have failed.
The above error occurred, but other domain names in the same environment can obtain certificates normally, only this domain name cannot. Why is that?

"indicating that it has been intercepted"? It's more likely that your firewall isn't allowing http over TCP port 80, or your domain points to the wrong IP, or your router is not forwarding traffic to that server.

Please provide details of a domain that does work and one that doesn't and we (the community) can possibly help, otherwise we're just guessing.

3 Likes

May I ask if this IP is from your place? removed for privacy reasons

Please do not post volunteers IP addresses, even if it might not be true.

Because now I'm not inclined to help you at all to debug this issue from my own home as you might "leak" my IP address suddenly.

2 Likes

No I think that's an Alibaba cloud IP.

2 Likes

In the end, it was indeed intercepted by Alibaba Cloud Ali Cloud Aliyun

1 Like

I'm not a child anymore, why am I making such a fuss about what I said?

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.