Timeout during connect (likely firewall problem)

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: k142.chickenkiller.com

I ran this command: sudo certbot --apache

It produced this output: Requesting a certificate for k142.chickenkiller.com

Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
Domain: k142.chickenkiller.com
Type: connection
Detail: Fetching http://k142.chickenkiller.com/.well-known/acme-challenge/lemjuuZ6T10xVH98ksucCIYpA9o50zjFM9joVoQBPLg: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version): 192.168.128.133

The operating system my web server runs on is (include version): Ubuntu 18.04

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Apache

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 1.19.0

2

That error message means that Let's Encrypt can't connect to your website in order to validate that you own it. I can't connect to it from my system either. You need to ensure your website is globally accessible and working first before you can move to securing it by adding https.

1 Like
3

Not sure why an IP was given as a response there...
Maybe "software" should be included in the form.

4

Likely unrelated, but interesting none-the-less.
It seems that MS SmartScreen doesn't like "Chicken Killer":

image
image938×538 25.9 KB

5

Hi, sorry for my bad English, i dont know what that question's meaning.:frowning:

1 Like
6

Which web server do you use?
[Apache, nginx, Tomcat, LiteSpeed, etc.]

7

Hi there, I got a domain from https://freedns.afraid.org/subdomain and here is information of my domain:
image
I'm newbie in Let's Encrypt and don't know what to do

8

Hi, i'm using Apache.

9

Can you choose another free (public) domain?

10

Let's me try. Thanks for your help, I hope will be back with good news :<

1 Like
11

Hi. I have got a free website with domain is k142.unaux.com.
And i have fail is image
Hope you or anyone help me :frowning: Im so dumb

12

Let's start with the output of:
sudo apachectl -t -D DUMP_VHOSTS

And why are these two IPs so different?:

Name:    k142.unaux.com
Address:  185.27.134.216

Name:    k142.chickenkiller.com
Address:  14.255.76.114

Please show the output of:
curl -4 ifconfig.co

13

Hi rg305, thanks for your dedicated help. Thank you so much.
Here is output of sudo apachectl -t -D DUMP_VHOSTS:
image
And here is curl -4 ifconfig.co:
14.255.76.114
These two IPs are given when I get the domain name. k142.unaux was obtained by me on profreehost.com; k142.chickenkiller obtained from freedns.afraid.org.
It's have 3 hour since my last reply because i reinstall ubuntu, sorry

1 Like
14

Let's have a look at the file:
/etc/apache2/sites-enabled/k142.unaux.com.conf

15

Here it is:
image
what should i do with k142.unaux website? eg install something?
and am i bothering you? i asked too much :frowning:

16

It is no bother.
The k142.unaux.com website should serve content found at that document root.

Let's try a couple of test files before continuing with certbot.

  1. echo root-test-file > /var/www/k142.unaux.com/Root-Test-File
  2. mkdir /var/www/k142.unaux.com/.well-known
    mkdir /var/www/k142.unaux.com/.well-known/acme-challenge
    echo c-t-file > /var/www/k142.unaux.com/.well-known/acme-challenge/C-T-File

Then we can check them with:
http://k142.unaux.com/Root-Test-File
http://k142.unaux.com/.well-known/acme-challenge/C-T-File

17

Looks like I'm wrong somewhere. it still error.
should i install nginx?

18

I do prefer nginx over apache.
But I'm not sure that will fix the problem; As I'm not yet certain where the problem is.

Did you make those files?

1 Like
19

Please show the output of:
curl -4 ifconfig.co

1 Like
20

Here it is: image

Btw, Im reading posts about Nginx and i see this:

image
image724×54 4.22 KB

i don't know have i done this?