# TSOHOST Intermittent HTTP Connectivity Problem **URL:** \ **Category:** Help\ **Created:** [July 12, 2023, 4:41pm UTC](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701 "2023-07-12T16:41:39Z")\ **Posts on this page:** 8\ **Page:** 2
**Author:** ![Duplada](https://avatars.discourse-cdn.com/v4/letter/d/4bbf92/32.png) [@Duplada](https://community.letsencrypt.org/u/Duplada)\ **Post date:** [July 17, 2023, 9:48am UTC](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701/21 "2023-07-17T09:48:14Z")
So I had a long conversation with TSOHOST this morning asking them why the connection gets reset I provided all the evidence and below is what the outcome was i do understand that, but since i am unable to replicate any of these issues on my end (on two environments) there's little I can do, regrettably. to summarise - you can't run curl commands on this server as you don't have root privileges nor the curl extension enabled; your SSL is not aplying because you are missing a force HTTPS rule, which should be added via your .htaccess file for each website (and you have none for neither website) and you can't automate SSL renewal on shared hosting because again, you are on a shared hosting server with no root access (you need sudo privileges to run either certbot or any autoSSL rule) i'm sorry if this is not an acceptable answer, Keith. but regrettably, from all you mentioned above, you are trying to achieve something that is not possible on your current hosting server ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [July 17, 2023, 12:59pm UTC](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701/22 "2023-07-17T12:59:05Z")
> [@Duplada](#): > > Have been using CertSage 1.4 for the last 6 months with no issues. On trying to renew my Domains today I am receiving the following errors. Looks like the TSO Host answer you got below is not even correct given what you said in your first post. And, I was getting "reset" errors for your "home" page using a Windows Edge browser. You could use the DNS Challenge to get a cert. But, at least some people will still see that "reset" error using your site. And, TSO Host is unable to reproduce or offer tracing help so you have to decide if they are still a good service. > [@Duplada](#): > > i'm sorry if this is not an acceptable answer, Keith. but regrettably, from all you mentioned above, you are trying to achieve something that is not possible on your current hosting server ---
**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\ **Post date:** [July 17, 2023, 2:34pm UTC](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701/23 "2023-07-17T14:34:11Z")
> [@Duplada](#): > > you can't run curl commands on this server as you don't have root privileges nor the curl extension enabled cURL is simply a command-line browser that @MikeMcQ used to demonstrate the problem. There's no need for you to run cURL yourself. As @MikeMcQ mentioned above, the same issue occurs when attempting to reach your homepage with a typical browser. > [@Duplada](#): > > your SSL is not aplying because you are missing a force HTTPS rule, which should be added via your .htaccess file for each website (and you have none for neither website) That TSOHOST responder clearly hasn't a clue what they're doing since CertSage uses UAPI to enable the force https toggle inside cPanel itself (which you can also do manually under the domains section in cPanel). You do not want to do this in an .htaccess file for many reasons. > [@Duplada](#): > > you can't automate SSL renewal on shared hosting because again, you are on a shared hosting server with no root access (you need sudo privileges to run either certbot or any autoSSL rule) That's not entirely true nor is it relevant to the problem at hand. Please stop framing this as a problem with CertSage or certificates with them, meaning please move them away from looking at those things, which **aren't the problem** , and have them work on the actual problem, which is a **connectivity issue** ( **server or network problem** ). ---
**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\ **Post date:** [July 17, 2023, 2:40pm UTC](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701/24 "2023-07-17T14:40:40Z")
> [@MikeMcQ](#): > > You could use the DNS Challenge to get a cert. There's no actual problem with having CertSage acquire or its install a cert in its own right. As you already know (and I'm only stating for the benefit of broader clarity here), the intermittent connectivity issue is causing problems with http(s) communications in general, which is interfering with CertSage being able to complete an HTTP-01 challenge with Let's Encrypt. CertSage usage is not the problem here. It's merely indicating the actual problem. This is a server/network problem, so we need to stop pointing fingers at the wrong places (CertSage/certs) and start pointing fingers at the right places (server/network). **Acquiring and installing a certificate by some other means will NOT fix this problem.** ---
**Author:** ![Duplada](https://avatars.discourse-cdn.com/v4/letter/d/4bbf92/32.png) [@Duplada](https://community.letsencrypt.org/u/Duplada)\ **Post date:** [July 24, 2023, 4:16pm UTC](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701/28 "2023-07-24T16:16:32Z")
So not having any luck with renewing my four SSL certificates I left it for a few days and I found I was now getting two different messages when trying to renew. urn:ietf:params:acme:error:connection 92.205.0.183: Fetching /.well-known/acme-challenge/D8LK\_pNUPHnebzFGwJpA5-Mc3gZx5dGcG\_B3AQAOPQk: Redirect loop detected or urn:ietf:params:acme:error:connection During secondary validation: 92.205.0.183: Fetching /.well-known/acme-challenge/82PMWPPWTfyfJjSABkgdS\_kCQZzgHKtkzX1hLyIgIBo: Redirect loop detected I kept trying and all my certificates were renewed after multiple attempts. ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [July 24, 2023, 4:48pm UTC](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701/29 "2023-07-24T16:48:13Z")
Your symptom has changed but the underlying problem is the same. There are inconsistent results making requests to your domain. We have seen this same pattern of faulty redirects and your original problem of "reset" failures. The pattern is that the first request from an IP fails but then they work properly. But, if you wait too long from that same IP the next request will fail but then work again. See below that the first request from a new IP gets a faulty redirect (back to itself). But, after that requests are normal. Retrying multiple times you just got lucky that eventually Let's Encrypt's requests came from IP addresses it used on previous attempts. You will get more consistent results getting a cert if you start using the DNS Challenge. But, they may be a big effort. Or, try using a different Certificate Authority. But, this just would improve getting a cert. Some users of your sites may be affected. It is difficult to know the scope since your hosting provider cannot find the problem. UPDATE: Regular users may be affected but only a minor issue with this faulty redirect. A browser would see the redirect, follow it, and then get a proper redirect. Let's Encrypt sees the faulty redirect and stops to protect itself from chasing a redirect loop. So, the DNS Challenge would help unless your provider goes back to issuing "reset" failures for the first request. ```plaintext First request. Note it redirected to just '/' and no "Server" header curl -i holmes.uk.com HTTP/1.1 302 Found Connection: close Pragma: no-cache cache-control: no-cache Location: / Immediately after get redirected by Apache server to your HTTPS as expected curl -i holmes.uk.com HTTP/1.1 302 Found Date: Mon, 24 Jul 2023 16:37:41 GMT Server: Apache Location: https://holmes.uk.com/ Content-Length: 206 Content-Type: text/html; charset=iso-8859-1 ``` ---
**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\ **Post date:** [July 25, 2023, 5:42am UTC](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701/30 "2023-07-25T05:42:26Z")
> [@Duplada](#): > > Redirect loop detected Did you create an `.htaccess` file with a redirect in it? There's already a redirect in cPanel. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [August 24, 2023, 5:42am UTC](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701/31 "2023-08-24T05:42:47Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed. [Previous page](https://community.letsencrypt.org/t/tsohost-intermittent-http-connectivity-problem/201701.md?page=1)