Timeout during connect (likely firewall problem)

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: k142.chickenkiller.com

I ran this command: sudo certbot --apache

It produced this output: Requesting a certificate for k142.chickenkiller.com

Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: k142.chickenkiller.com
Type: connection
Detail: Fetching http://k142.chickenkiller.com/.well-known/acme-challenge/lemjuuZ6T10xVH98ksucCIYpA9o50zjFM9joVoQBPLg: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version):

The operating system my web server runs on is (include version): Ubuntu 18.04

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Apache

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 1.19.0

That error message means that Let's Encrypt can't connect to your website in order to validate that you own it. I can't connect to it from my system either. You need to ensure your website is globally accessible and working first before you can move to securing it by adding https.

1 Like

Not sure why an IP was given as a response there...
Maybe "software" should be included in the form.

Likely unrelated, but interesting none-the-less.
It seems that MS SmartScreen doesn't like "Chicken Killer":

Hi, sorry for my bad English, i dont know what that question's meaning.:frowning:

1 Like

Which web server do you use?
[Apache, nginx, Tomcat, LiteSpeed, etc.]

Hi there, I got a domain from https://freedns.afraid.org/subdomain and here is information of my domain:
I'm newbie in Let's Encrypt and don't know what to do

Hi, i'm using Apache.

Can you choose another free (public) domain?

Let's me try. Thanks for your help, I hope will be back with good news :<

1 Like

Hi. I have got a free website with domain is k142.unaux.com.
And i have fail is image
Hope you or anyone help me :frowning: Im so dumb

Let's start with the output of:
sudo apachectl -t -D DUMP_VHOSTS

And why are these two IPs so different?:

Name:    k142.unaux.com

Name:    k142.chickenkiller.com

Please show the output of:
curl -4 ifconfig.co

Hi rg305, thanks for your dedicated help. Thank you so much.
Here is output of sudo apachectl -t -D DUMP_VHOSTS:
And here is curl -4 ifconfig.co:
These two IPs are given when I get the domain name. k142.unaux was obtained by me on profreehost.com; k142.chickenkiller obtained from freedns.afraid.org.
It's have 3 hour since my last reply because i reinstall ubuntu, sorry

1 Like

Let's have a look at the file:

Here it is:
what should i do with k142.unaux website? eg install something?
and am i bothering you? i asked too much :frowning:

It is no bother.
The k142.unaux.com website should serve content found at that document root.

Let's try a couple of test files before continuing with certbot.

  1. echo root-test-file > /var/www/k142.unaux.com/Root-Test-File
  2. mkdir /var/www/k142.unaux.com/.well-known
    mkdir /var/www/k142.unaux.com/.well-known/acme-challenge
    echo c-t-file > /var/www/k142.unaux.com/.well-known/acme-challenge/C-T-File

Then we can check them with:

Looks like I'm wrong somewhere. it still error.
should i install nginx?

I do prefer nginx over apache.
But I'm not sure that will fix the problem; As I'm not yet certain where the problem is.

Did you make those files?

1 Like

Please show the output of:
curl -4 ifconfig.co

1 Like

Here it is: image

Btw, Im reading posts about Nginx and i see this:

i don't know have i done this?