Timeout when running certbot

Help
1

Hi guys,

I am new to SSL certificates so please bear with my ignorance. I tried to research how this stuff works but looks like I am stuck nevertheless.

I am running a little web server on my 1st gen Raspberry Pi. The port forwarding is set up (TCP only, do I need UDP as well?): https://imgur.com/Grc5ycI

I get a timeout in letsdebug.net but the ports 80 and 443 are open according to https://www.yougetsignal.com/tools/open-ports/ Also the server is working, I can open my website in the browser. It is sitting behind an .htaccess, however. Could this be the problem?

Also there is no .well-known/ folder in /var/www/html. I assumed that it is generated automatically by certbot so I am confused that it is not there.

Below is the filled standard form, please let me know if any further input is required.

Thanks for your input!

My domain is: photon.serverpit.com

I ran this command: sudo certbot --nginx

It produced this output: https://pastebin.com/Gzna3aQg

My web server is (include version): nginx 1.10.3

The operating system my web server runs on is (include version): Raspbian GNU/Linux 9.11 (stretch)

My hosting provider, if applicable, is: none

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): 0.28.0

2

Hi @Photon,

Where are you accessing it from? Is it on your own LAN?

I also see a timeout and I think the problem is a firewall that's blocking inbound connection on these ports. It could conceivably be a host firewall on the Raspberry Pi itself, or it could be a firewall policy at your ISP.

2 Likes
3

Yes, exactly! But I know that this server was accessible from outside at least a few days ago. I even have screenshots of the website contents, which were sent to me, as evidence that it didn't happen in a dream. :smile:

However, I updated Raspbian just yesterday... So things might have changed. I will look into the update log and post again. Thanks for the hint!

Update: The system update was rather massive and I don't really know what I am looking for. Which package could be the culprit? Here's the update log:

   Start-Date: 2020-03-29  11:38:02
Commandline: apt-get upgrade
Requested-By: pi (1000)
Upgrade: perl-base:armhf (5.24.1-3+deb9u5, 5.24.1-3+deb9u6), libnginx-mod-http-geoip:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), libnginx-mod-http-upstream-fair:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), libcomerr2:armhf (1.43.4-2, 1.43.4-2+deb9u1), libraspberrypi-bin:armhf (1.20190709~stretch-1, 1.20190819~stretch-1), libservlet3.1-java:armhf (8.5.14-1+deb9u3, 8.5.50-0+deb9u1), libopenjp2-7:armhf (2.1.2-1.1+deb9u3, 2.1.2-1.1+deb9u4), libnghttp2-14:armhf (1.18.1-1, 1.18.1-1+deb9u1), libcups2:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), libnginx-mod-http-auth-pam:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), libraspberrypi-dev:armhf (1.20190709~stretch-1, 1.20190819~stretch-1), libraspberrypi-doc:armhf (1.20190709~stretch-1, 1.20190819~stretch-1), libsasl2-modules-db:armhf (2.1.27~101-g0780600+dfsg-3, 2.1.27~101-g0780600+dfsg-3+deb9u1), libcurl3:armhf (7.52.1-5+deb9u9, 7.52.1-5+deb9u10), openssl:armhf (1.1.0k-1~deb9u1, 1.1.0l-1~deb9u1), ruby2.3:armhf (2.3.3-1+deb9u6+rpi1, 2.3.3-1+deb9u7+rpi1), qt5-gtk-platformtheme:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), libnginx-mod-http-dav-ext:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), syncthing:armhf (1.2.0, 1.4.0), libwbclient0:armhf (2:4.5.16+dfsg-1+deb9u1, 2:4.5.16+dfsg-1+deb9u2), git-man:armhf (1:2.11.0-3+deb9u4, 1:2.11.0-3+deb9u5), libsystemd0:armhf (232-25+deb9u11, 232-25+deb9u12), libexpat1-dev:armhf (2.2.0-2+deb9u2, 2.2.0-2+deb9u3), libgd3:armhf (2.2.4-2+deb9u4, 2.2.4-2+deb9u5), libgs9:armhf (9.26a~dfsg-0+deb9u3, 9.26a~dfsg-0+deb9u6), mariadb-common:armhf (10.1.38-0+deb9u1, 10.1.44-0+deb9u1), libicu57:armhf (57.1-6+deb9u2, 57.1-6+deb9u4), libarchive13:armhf (3.2.2-2+deb9u1, 3.2.2-2+deb9u2), e2fsprogs:armhf (1.43.4-2, 1.43.4-2+deb9u1), perl-modules-5.24:armhf (5.24.1-3+deb9u5, 5.24.1-3+deb9u6), sudo:armhf (1.8.19p1-2.1, 1.8.19p1-2.1+deb9u2), libqt5dbus5:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), python3-pil:armhf (4.0.0-4, 4.0.0-4+deb9u1), mariadb-server-core-10.1:armhf (10.1.38-0+deb9u1, 10.1.44-0+deb9u1), python-apt-common:armhf (1.4.0~beta3, 1.4.1), git:armhf (1:2.11.0-3+deb9u4, 1:2.11.0-3+deb9u5), openssh-sftp-server:armhf (1:7.4p1-10+deb9u6, 1:7.4p1-10+deb9u7), libqt5widgets5:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), udev:armhf (232-25+deb9u11, 232-25+deb9u12), cups-server-common:armhf (2.2.1-8+deb9u3, 2.2.1-8+deb9u5), libsasl2-2:armhf (2.1.27~101-g0780600+dfsg-3, 2.1.27~101-g0780600+dfsg-3+deb9u1), qemu-user:armhf (1:2.8+dfsg-6+deb9u7, 1:2.8+dfsg-6+deb9u8), e2fslibs:armhf (1.43.4-2, 1.43.4-2+deb9u1), cups-common:armhf (2.2.1-8+deb9u3, 2.2.1-8+deb9u5), libmagic1:armhf (1:5.30-1+deb9u2, 1:5.30-1+deb9u3), libexpat1:armhf (2.2.0-2+deb9u2, 2.2.0-2+deb9u3), nginx-common:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), libudev1:armhf (232-25+deb9u11, 232-25+deb9u12), libvpx4:armhf (1.6.1-3+deb9u1, 1.6.1-3+deb9u2), libqt5xml5:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), mariadb-server-10.1:armhf (10.1.38-0+deb9u1, 10.1.44-0+deb9u1), libqt5printsupport5:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), raspberrypi-kernel:armhf (1.20190709~stretch-1, 1.20190819~stretch-1), libss2:armhf (1.43.4-2, 1.43.4-2+deb9u1), libperl5.24:armhf (5.24.1-3+deb9u5, 5.24.1-3+deb9u6), python-cryptography:armhf (1.7.1-3+deb9u1, 1.7.1-3+deb9u2), libqt5concurrent5:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), samba-libs:armhf (2:4.5.16+dfsg-1+deb9u1, 2:4.5.16+dfsg-1+deb9u2), libnginx-mod-http-subs-filter:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), nginx-full:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), raspberrypi-bootloader:armhf (1.20190709~stretch-1, 1.20190819~stretch-1), libexif12:armhf (0.6.21-2, 0.6.21-2+deb9u1), libqt5gui5:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), python3-cryptography:armhf (1.7.1-3+deb9u1, 1.7.1-3+deb9u2), libmagic-mgc:armhf (1:5.30-1+deb9u2, 1:5.30-1+deb9u3), libsasl2-modules:armhf (2.1.27~101-g0780600+dfsg-3, 2.1.27~101-g0780600+dfsg-3+deb9u1), cups-ppdc:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), libcupsmime1:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), libruby2.3:armhf (2.3.3-1+deb9u6+rpi1, 2.3.3-1+deb9u7+rpi1), libcaca0:armhf (0.99.beta19-2+deb8u1, 0.99.beta19-2.1~deb9u1), ssh:armhf (1:7.4p1-10+deb9u6, 1:7.4p1-10+deb9u7), libnginx-mod-http-image-filter:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), systemd-sysv:armhf (232-25+deb9u11, 232-25+deb9u12), libldap-common:armhf (2.4.44+dfsg-5+deb9u2, 2.4.44+dfsg-5+deb9u3), libglib2.0-bin:armhf (2.50.3-2, 2.50.3-2+deb9u2), libnginx-mod-http-echo:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), libpam-systemd:armhf (232-25+deb9u11, 232-25+deb9u12), ghostscript:armhf (9.26a~dfsg-0+deb9u3, 9.26a~dfsg-0+deb9u6), systemd:armhf (232-25+deb9u11, 232-25+deb9u12), libqt5core5a:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), libnginx-mod-mail:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), libraspberrypi0:armhf (1.20190709~stretch-1, 1.20190819~stretch-1), openssh-server:armhf (1:7.4p1-10+deb9u6, 1:7.4p1-10+deb9u7), libsmbclient:armhf (2:4.5.16+dfsg-1+deb9u1, 2:4.5.16+dfsg-1+deb9u2), unzip:armhf (6.0-21+deb9u1, 6.0-21+deb9u2), qemu-user-binfmt:armhf (1:2.8+dfsg-6+deb9u7, 1:2.8+dfsg-6+deb9u8), openssh-client:armhf (1:7.4p1-10+deb9u6, 1:7.4p1-10+deb9u7), mariadb-client-10.1:armhf (10.1.38-0+deb9u1, 10.1.44-0+deb9u1), libgs9-common:armhf (9.26a~dfsg-0+deb9u3, 9.26a~dfsg-0+deb9u6), usbutils:armhf (1:007-4, 1:007-4+deb9u1), mariadb-client-core-10.1:armhf (10.1.38-0+deb9u1, 10.1.44-0+deb9u1), libglib2.0-data:armhf (2.50.3-2, 2.50.3-2+deb9u2), libqt5opengl5:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), libtimedate-perl:armhf (2.3000-2, 2.3000-2+deb9u1), libmariadbclient18:armhf (10.1.38-0+deb9u1, 10.1.44-0+deb9u1), file:armhf (1:5.30-1+deb9u2, 1:5.30-1+deb9u3), libcupsppdc1:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), libidn11:armhf (1.33-1, 1.33-1+deb9u1), libfreetype6:armhf (2.6.3-3.2, 2.6.3-3.2+deb9u1), libnginx-mod-stream:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), perl:armhf (5.24.1-3+deb9u5, 5.24.1-3+deb9u6), cups-bsd:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), minissdpd:armhf (1.2.20130907-4.1, 1.2.20130907-4.1+deb9u1), cups-core-drivers:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), cups-daemon:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), libssl1.1:armhf (1.1.0k-1~deb9u1, 1.1.0l-1~deb9u1), libnginx-mod-http-xslt-filter:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3), libsdl-image1.2:armhf (1.2.12-5+deb9u1, 1.2.12-5+deb9u2), libqt5network5:armhf (5.7.1+dfsg-3+rpi1+deb9u1, 5.7.1+dfsg-3+rpi1+deb9u2), gettext-base:armhf (0.19.8.1-2, 0.19.8.1-2+deb9u1), libcupsimage2:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), cups:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), apache2-utils:armhf (2.4.25-3+deb9u7, 2.4.25-3+deb9u9), curl:armhf (7.52.1-5+deb9u9, 7.52.1-5+deb9u10), libcupscgi1:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), cups-client:armhf (2.2.1-8+deb9u2, 2.2.1-8+deb9u5), patch:armhf (2.7.5-1+deb9u1, 2.7.5-1+deb9u2), git-core:armhf (1:2.11.0-3+deb9u4, 1:2.11.0-3+deb9u5), libglib2.0-0:armhf (2.50.3-2, 2.50.3-2+deb9u2), python-pil:armhf (4.0.0-4, 4.0.0-4+deb9u1), libfaad2:armhf (2.8.0~cvs20161113-1+deb9u1, 2.8.0~cvs20161113-1+deb9u2), libcurl3-gnutls:armhf (7.52.1-5+deb9u9, 7.52.1-5+deb9u10), libfribidi0:armhf (0.19.7-1, 0.19.7-1+deb9u1), libxslt1.1:armhf (1.1.29-2.1, 1.1.29-2.1+deb9u2), libssl1.0.2:armhf (1.0.2s-1~deb9u1, 1.0.2u-1~deb9u1), base-files:armhf (9.9+rpi1+deb9u9, 9.9+rpi1+deb9u11), tzdata:armhf (2019a-0+deb9u1, 2019c-0+deb9u1), nginx:armhf (1.10.3-1+deb9u2, 1.10.3-1+deb9u3)
End-Date: 2020-03-29  12:20:47

Start-Date: 2020-03-29  23:54:10
Commandline: apt-get install php-yaml
Requested-By: pi (1000)
Install: php7.0-cli:armhf (7.0.33-0+deb9u7, automatic), php-common:armhf (1:49, automatic), php7.0-opcache:armhf (7.0.33-0+deb9u7, automatic), php7.0-common:armhf (7.0.33-0+deb9u7, automatic), php7.0-json:armhf (7.0.33-0+deb9u7, automatic), php7.0-readline:armhf (7.0.33-0+deb9u7, automatic), php-yaml:armhf (2.0.0+1.3.0-2), php7.0-phpdbg:armhf (7.0.33-0+deb9u7, automatic)
End-Date: 2020-03-29  23:58:31

Update 2: Looks like the script updating the IP in the dDNS hosting failed. I will try again and report back!

Update 3: It worked now! Thanks a lot!

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.