Timeout during connect (likely firewall problem)

vkahhh · September 10, 2021, 5:30am

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: k142.chickenkiller.com

I ran this command: sudo certbot --apache

It produced this output: Requesting a certificate for k142.chickenkiller.com

Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: k142.chickenkiller.com
Type: connection
Detail: Fetching http://k142.chickenkiller.com/.well-known/acme-challenge/lemjuuZ6T10xVH98ksucCIYpA9o50zjFM9joVoQBPLg: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version): 192.168.128.133

The operating system my web server runs on is (include version): Ubuntu 18.04

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Apache

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 1.19.0

petercooperjr · September 10, 2021, 11:19am

That error message means that Let's Encrypt can't connect to your website in order to validate that you own it. I can't connect to it from my system either. You need to ensure your website is globally accessible and working first before you can move to securing it by adding https.

rg305 · September 10, 2021, 12:15pm

Not sure why an IP was given as a response there...
Maybe "software" should be included in the form.

rg305 · September 10, 2021, 12:19pm

Likely unrelated, but interesting none-the-less.
It seems that MS SmartScreen doesn't like "Chicken Killer":

vkahhh · September 10, 2021, 2:18pm

Hi, sorry for my bad English, i dont know what that question's meaning.

rg305 · September 10, 2021, 2:20pm

Which web server do you use?
[Apache, nginx, Tomcat, LiteSpeed, etc.]

vkahhh · September 10, 2021, 2:21pm

Hi there, I got a domain from https://freedns.afraid.org/subdomain and here is information of my domain:

I'm newbie in Let's Encrypt and don't know what to do

vkahhh · September 10, 2021, 2:22pm

Hi, i'm using Apache.

rg305 · September 10, 2021, 2:23pm

Can you choose another free (public) domain?

vkahhh · September 10, 2021, 2:24pm

Let's me try. Thanks for your help, I hope will be back with good news :<

vkahhh · September 10, 2021, 5:07pm

Hi. I have got a free website with domain is k142.unaux.com.
And i have fail is
Hope you or anyone help me Im so dumb

rg305 · September 10, 2021, 5:09pm

Let's start with the output of:
sudo apachectl -t -D DUMP_VHOSTS

And why are these two IPs so different?:

Name:    k142.unaux.com
Address:  185.27.134.216

Name:    k142.chickenkiller.com
Address:  14.255.76.114

Please show the output of:
curl -4 ifconfig.co

vkahhh · September 10, 2021, 5:24pm

Hi rg305, thanks for your dedicated help. Thank you so much.
Here is output of sudo apachectl -t -D DUMP_VHOSTS:

And here is curl -4 ifconfig.co:
14.255.76.114
These two IPs are given when I get the domain name. k142.unaux was obtained by me on profreehost.com; k142.chickenkiller obtained from freedns.afraid.org.
It's have 3 hour since my last reply because i reinstall ubuntu, sorry

rg305 · September 10, 2021, 5:37pm

Let's have a look at the file:
/etc/apache2/sites-enabled/k142.unaux.com.conf

vkahhh · September 10, 2021, 5:47pm

Here it is:

what should i do with k142.unaux website? eg install something?
and am i bothering you? i asked too much

rg305 · September 10, 2021, 5:56pm

It is no bother.
The k142.unaux.com website should serve content found at that document root.

Let's try a couple of test files before continuing with certbot.

echo root-test-file > /var/www/k142.unaux.com/Root-Test-File
mkdir /var/www/k142.unaux.com/.well-known
mkdir /var/www/k142.unaux.com/.well-known/acme-challenge
echo c-t-file > /var/www/k142.unaux.com/.well-known/acme-challenge/C-T-File

Then we can check them with:
http://k142.unaux.com/Root-Test-File
http://k142.unaux.com/.well-known/acme-challenge/C-T-File

vkahhh · September 10, 2021, 6:13pm

Looks like I'm wrong somewhere. it still error.
should i install nginx?

rg305 · September 10, 2021, 6:19pm

I do prefer nginx over apache.
But I'm not sure that will fix the problem; As I'm not yet certain where the problem is.

Did you make those files?

rg305 · September 10, 2021, 6:20pm

Please show the output of:
curl -4 ifconfig.co

vkahhh · September 10, 2021, 6:24pm

Here it is:

Btw, Im reading posts about Nginx and i see this:

i don't know have i done this?