# Timeout during connect (likely firewall problem)

**URL:** <https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/120294>\
**Category:** Help\
**Created:** [April 21, 2020, 9:03pm UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/120294 "2020-04-21T21:03:42Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![al\_zain92](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/al_zain92/32/39069_2.png) [@al\_zain92](https://community.letsencrypt.org/u/al_zain92)\
**Post date:** [April 21, 2020, 9:03pm UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/120294/1 "2020-04-21T21:03:42Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: gate.cj.co.id

I ran this command: sudo certbot certonly --webroot -w /var/www/html -d gate.cj.co.id

It produced this output:  
Failed authorization procedure. gate.cj.co.id (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: During secondary validation: Fetching [http://gate.cj.co.id/.well-known/acme-challenge/BxAW3uTq\_-VJjNEBZaA1Zr8cbrvshY7x1KSN9r\_vqDY:](http://gate.cj.co.id/.well-known/acme-challenge/BxAW3uTq_-VJjNEBZaA1Zr8cbrvshY7x1KSN9r_vqDY:) Timeout during connect (likely firewall problem)

IMPORTANT NOTES:

- The following errors were reported by the server:

My web server is (include version): Apache 2.4

The operating system my web server runs on is (include version): Ubuntu Server 18.04

My hosting provider, if applicable, is: VPS

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot): 0.31.0

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [April 21, 2020, 9:07pm UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/120294/2 "2020-04-21T21:07:04Z")

</div>

Hi @al_zain92

> [@al\_zain92](#):
>
> During secondary validation: Fetching [http://gate.cj.co.id/.well-known/acme-challenge/BxAW3uTq\_-VJjNEBZaA1Zr8cbrvshY7x1KSN9r\_vqDY:](http://gate.cj.co.id/.well-known/acme-challenge/BxAW3uTq_-VJjNEBZaA1Zr8cbrvshY7x1KSN9r_vqDY:) Timeout during connect (likely firewall problem)

"During secondary validation" is important.

Read

> [@ACME v1/v2: Validating challenges from multiple network vantage points](https://community.letsencrypt.org/t/acme-v1-v2-validating-challenges-from-multiple-network-vantage-points/112253):
>
> O…

Letsencrypt checks your domain from different networks.

The error says: The main Letsencrypt servers are able to connect your domain. The additional servers are blocked.

May be you block some ip addresses or you have some regional filters.

---

<div class="post-metadata">

**Author:** ![al\_zain92](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/al_zain92/32/39069_2.png) [@al\_zain92](https://community.letsencrypt.org/u/al_zain92)\
**Post date:** [April 21, 2020, 9:17pm UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/120294/3 "2020-04-21T21:17:56Z")

</div>

I did’nt block some IP, before I also disasable ufw but still got error.  
I use dedicated server and IP from provider  
Cloud you tell how to check whether my ip accessable from letsencrypt server?

---

<div class="post-metadata">

**Author:** ![al\_zain92](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/al_zain92/32/39069_2.png) [@al\_zain92](https://community.letsencrypt.org/u/al_zain92)\
**Post date:** [April 21, 2020, 9:29pm UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/120294/4 "2020-04-21T21:29:37Z")

</div>

Btw I tried using staging environment successful

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [May 21, 2020, 9:29pm UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/120294/5 "2020-05-21T21:29:45Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
