Timeout during connect (likely firewall problem)

Hello,
I'm unable to resolve this issue. I've managed to set up a web server httpd, but now I can't enable https with acme-client. Maybe something wrong with ports because I haven't done anything with firewall yet.
I have A- and AAAA-records.

My domain is:

akapinos.space

I ran this command:

acme-client -v akapinos.space

It produced this output:

acme-client: https://acme-v02.api.letsencrypt.org/directory: directories
acme-client: acme-v02.api.letsencrypt.org: DNS: 172.65.32.248
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14314792266
acme-client: challenge, token: lBPkIEn7LFmpmoRm6RJGhkzFyyaMO6NGeZdKWkWYQdo, uri: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14314792266/KEe0qg, status: 2
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14326961502
acme-client: challenge, token: BPM6Dv6_U5_d4Fh1ZtDdJLUzo6I6DC6tpYMioP24X-o, uri: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14326961502/rV_hSw, status: 0
acme-client: /var/www/acme/BPM6Dv6_U5_d4Fh1ZtDdJLUzo6I6DC6tpYMioP24X-o: created
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14326961502/rV_hSw: challenge
acme-client: order.status 0
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14314792266
acme-client: challenge, token: lBPkIEn7LFmpmoRm6RJGhkzFyyaMO6NGeZdKWkWYQdo, uri: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14314792266/KEe0qg, status: 2
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14326961502
acme-client: challenge, token: BPM6Dv6_U5_d4Fh1ZtDdJLUzo6I6DC6tpYMioP24X-o, uri: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14326961502/rV_hSw, status: 0
acme-client: /var/www/acme/BPM6Dv6_U5_d4Fh1ZtDdJLUzo6I6DC6tpYMioP24X-o: created
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14326961502/rV_hSw: challenge
acme-client: order.status 0
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14314792266
acme-client: challenge, token: lBPkIEn7LFmpmoRm6RJGhkzFyyaMO6NGeZdKWkWYQdo, uri: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14314792266/KEe0qg, status: 2
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14326961502
acme-client: challenge, token: BPM6Dv6_U5_d4Fh1ZtDdJLUzo6I6DC6tpYMioP24X-o, uri: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14326961502/rV_hSw, status: 0
acme-client: /var/www/acme/BPM6Dv6_U5_d4Fh1ZtDdJLUzo6I6DC6tpYMioP24X-o: created
acme-client: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14326961502/rV_hSw: challenge
acme-client: order.status 0
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14314792266
acme-client: challenge, token: lBPkIEn7LFmpmoRm6RJGhkzFyyaMO6NGeZdKWkWYQdo, uri: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14314792266/KEe0qg, status: 2
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14326961502
acme-client: challenge, token: BPM6Dv6_U5_d4Fh1ZtDdJLUzo6I6DC6tpYMioP24X-o, uri: https://acme-v02.api.letsencrypt.org/acme/chall-v3/14326961502/rV_hSw, status: -1
acme-client: order.status -1
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14314792266
acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz-v3/14326961502
acme-client: Fetching http://www.akapinos.space/.well-known/acme-challenge/BPM6Dv6_U5_d4Fh1ZtDdJLUzo6I6DC6tpYMioP24X-o: Timeout during connect (likely firewall problem)
acme-client: bad exit: netproc(93325): 1

My web server is (include version):

httpd.

The operating system my web server runs on is (include version):

OpenBSD 6.8

My hosting provider, if applicable, is:

NameCheap.

I can login to a root shell on my machine (yes or no, or I don't know):

Yes.

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

No.

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

I use acme-client.

1 Like

You have an IPv6 address configured for your website (2a07:8dc1:20:0:c3:7eff:fe1c:85a8) which is not responding.

While your IPv4 address seems to work nicely, Let's Encrypt prefers IPv6, so if you have a non-functional IPv6 address, it won't work.

2 Likes

So there is the problem with IPv6. How to fix this?
When I configured my VPS I chose "Custom ISO". Maybe I missed something during the installation or didn't configure IPv6 after? I took these IP addresses from VPS Dashboard.
I've also tried using auto-configurated FreeBSD. I've managed to setup obhttpd, but struggling the same issue with https using acme.sh.
The output: akapinos.space:Verify error:Fetching http://www.akapinos.space/.well-known/acme-challenge/-Ry7qMfJa5X24GnGdIZKis9pYQmCZOzfixb8eBj1irc: Timeout during connect (likely firewall problem)

1 Like

Start by removing the AAAA entry from DNS.
Then get IPv6 working.
Then add the working AAAA DNS entry back in.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.