I’m trying to generate certificate with http-01 method. LE is able to create the file on my server but cannot read it afterward. I get a message Timeout during connect (likely firewall problem) when I check the detail of the LE order.
I tried to access to the file with a browser and I’m able to.
The ports 80 and 443 are open.
I confirm that isn't a firewall issue. I shutdown it for testing and I keep getting the error.
It seems that LE is asking the wrong file. Indeed, he creates each time a new file with a new name but he keeps requesting another (perhaps an old one ?)
Please: If you change your configuration. Start a new certificate order, share the new result to see, if your new configuration has fixed the old problem.
Yes. The token file is created by your ACME client. The ACME client asks Let's Encrypt what to put in the challenge directory and your ACME client puts it there (i.e., by using an outbound connection to the Let's Encrypt server). Only then, the validation servers try to access it, using an inbound connection on port 80. So as you can see, those are two different steps.