# Unblock IP address **URL:** \ **Category:** Help\ **Created:** [September 7, 2022, 7:47am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081 "2022-09-07T07:47:13Z")\ **Posts on this page:** 19\ **Page:** 2
**Author:** ![gibrandev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/gibrandev/32/63788_2.png) [@gibrandev](https://community.letsencrypt.org/u/gibrandev)\ **Post date:** [September 7, 2022, 9:03am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/22 "2022-09-07T09:03:03Z")
In first thread my ip not in blocked 103.136.163.71 ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [September 7, 2022, 9:10am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/23 "2022-09-07T09:10:24Z")
The only thing I can think of (within your server) to check is that `ca-certificates.crt` file. The size "213920" doesn't make sense. If you want to test around that, try: ```nohighlight mv /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt.big cp /snap/core20/1611/etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt ``` Then again: ```nohighlight curl -Iv https://acme-v02.api.letsencrypt.org curl -Iv https://acme-v02.api.letsencrypt.org --ca-cert /etc/ssl/certs/ca-certificates.crt ``` ---
**Author:** ![gibrandev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/gibrandev/32/63788_2.png) [@gibrandev](https://community.letsencrypt.org/u/gibrandev)\ **Post date:** [September 7, 2022, 9:14am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/24 "2022-09-07T09:14:07Z")
both commands are the same, fyi my server use Debian 10 and ISPConfig as cpanel, other my server work normaly ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [September 7, 2022, 9:14am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/25 "2022-09-07T09:14:34Z")
And one last set of tests: `dig acme-v02.api.letsencrypt.org +short` `openssl s_client -connect acme-v02.api.letsencrypt.org:443 | head` ---
**Author:** ![gibrandev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/gibrandev/32/63788_2.png) [@gibrandev](https://community.letsencrypt.org/u/gibrandev)\ **Post date:** [September 7, 2022, 9:15am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/26 "2022-09-07T09:15:19Z")
```nohighlight root@boneto:/home/ispconfig3_install# dig acme-v02.api.letsencrypt.org +short s_client -connect acme-v02.api.letsencrypt.org:443 | head prod.api.letsencrypt.org. ca80a1adb12a4fbdac5ffcbc944e9a61.pacloudflare.com. 172.65.32.248 root@boneto:/home/ispconfig3_install# openssl s_client -connect acme-v02.api.letsencrypt.org:443 | head write:errno=104 CONNECTED(00000003) --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 0 bytes and written 320 bytes Verification: OK --- New, (NONE), Cipher is (NONE) root@boneto:/home/ispconfig3_install# ``` ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [September 7, 2022, 9:16am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/27 "2022-09-07T09:16:53Z")
What shows?: `curl -Ik https://acme-v02.api.letsencrypt.org` [definitely my last test] ---
**Author:** ![gibrandev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/gibrandev/32/63788_2.png) [@gibrandev](https://community.letsencrypt.org/u/gibrandev)\ **Post date:** [September 7, 2022, 9:17am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/28 "2022-09-07T09:17:43Z")
```nohighlight curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to acme-v02.api.letsencrypt.org:443 ``` ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [September 7, 2022, 9:27am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/29 "2022-09-07T09:27:55Z")
I'm done. Now you may need to do some sort of `traceroute` and/or `tcpdump`. ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [September 7, 2022, 11:00am UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/30 "2022-09-07T11:00:10Z")
If I look at [OpenSSL SSL\_connect: SSL\_ERROR\_SYSCALL · Issue #9566 · openssl/openssl · GitHub](https://github.com/openssl/openssl/issues/9566) it might be due to TLS cipher (or protocol?) differences between the ACME server endpoint and the client. What exact version of OpenSSL is installed? ---
**Author:** ![jvanasco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jvanasco/32/55900_2.png) [@jvanasco](https://community.letsencrypt.org/u/jvanasco)\ **Post date:** [September 7, 2022, 2:09pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/31 "2022-09-07T14:09:59Z")
Can you show the output of this: ``` curl -vv http://r3.o.lencr.org ``` Also, ``` openssl version curl --version ``` The first command should help figure out if there is network connectivity. The second two can help figure out if you have a library issue. You may also have a firewall issue on your end. ---
**Author:** ![gibrandev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/gibrandev/32/63788_2.png) [@gibrandev](https://community.letsencrypt.org/u/gibrandev)\ **Post date:** [September 7, 2022, 2:24pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/32 "2022-09-07T14:24:09Z")
> [@jvanasco](#): > > `curl -vv http://r3.o.lencr.org` ```nohighlight root@boneto:~# curl -vv http://r3.o.lencr.org * Expire in 0 ms for 6 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 0 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 4 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 1 ms for 1 (transfer 0x55df42029d40) * Expire in 4 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 4 ms for 1 (transfer 0x55df42029d40) * Expire in 2 ms for 1 (transfer 0x55df42029d40) * Expire in 3 ms for 1 (transfer 0x55df42029d40) * Expire in 4 ms for 1 (transfer 0x55df42029d40) * Expire in 3 ms for 1 (transfer 0x55df42029d40) * Expire in 3 ms for 1 (transfer 0x55df42029d40) * Expire in 4 ms for 1 (transfer 0x55df42029d40) * Expire in 4 ms for 1 (transfer 0x55df42029d40) * Expire in 4 ms for 1 (transfer 0x55df42029d40) * Expire in 8 ms for 1 (transfer 0x55df42029d40) * Expire in 5 ms for 1 (transfer 0x55df42029d40) * Expire in 5 ms for 1 (transfer 0x55df42029d40) * Expire in 8 ms for 1 (transfer 0x55df42029d40) * Expire in 5 ms for 1 (transfer 0x55df42029d40) * Expire in 6 ms for 1 (transfer 0x55df42029d40) * Expire in 8 ms for 1 (transfer 0x55df42029d40) * Expire in 7 ms for 1 (transfer 0x55df42029d40) * Expire in 7 ms for 1 (transfer 0x55df42029d40) * Expire in 8 ms for 1 (transfer 0x55df42029d40) * Expire in 8 ms for 1 (transfer 0x55df42029d40) * Expire in 8 ms for 1 (transfer 0x55df42029d40) * Expire in 16 ms for 1 (transfer 0x55df42029d40) * Expire in 10 ms for 1 (transfer 0x55df42029d40) * Expire in 11 ms for 1 (transfer 0x55df42029d40) * Expire in 16 ms for 1 (transfer 0x55df42029d40) * Expire in 14 ms for 1 (transfer 0x55df42029d40) * Expire in 14 ms for 1 (transfer 0x55df42029d40) * Expire in 16 ms for 1 (transfer 0x55df42029d40) * Expire in 14 ms for 1 (transfer 0x55df42029d40) * Expire in 14 ms for 1 (transfer 0x55df42029d40) * Expire in 50 ms for 1 (transfer 0x55df42029d40) * Trying 119.110.115.186... * TCP_NODELAY set * Expire in 149971 ms for 3 (transfer 0x55df42029d40) * Expire in 200 ms for 4 (transfer 0x55df42029d40) * Connected to r3.o.lencr.org (119.110.115.186) port 80 (#0) > GET / HTTP/1.1 > Host: r3.o.lencr.org > User-Agent: curl/7.64.0 > Accept: */* > < HTTP/1.1 200 OK < Server: nginx < Content-Length: 0 < Cache-Control: max-age=9082 < Expires: Wed, 07 Sep 2022 16:53:50 GMT < Date: Wed, 07 Sep 2022 14:22:28 GMT < Connection: keep-alive < * Connection #0 to host r3.o.lencr.org left intact root@boneto:~# openssl version OpenSSL 1.1.1n 15 Mar 2022 root@boneto:~# curl --version curl 7.64.0 (x86_64-pc-linux-gnu) libcurl/7.64.0 OpenSSL/1.1.1n zlib/1.2.11 libidn2/2.2.0 libpsl/0.20.2 (+libidn2/2.0.5) libssh2/1.8.0 nghttp2/1.36.0 librtmp/2.3 Release-Date: 2019-02-06 Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp Features: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz TLS-SRP HTTP2 UnixSockets HTTPS-proxy PSL ``` ---
**Author:** ![gibrandev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/gibrandev/32/63788_2.png) [@gibrandev](https://community.letsencrypt.org/u/gibrandev)\ **Post date:** [September 7, 2022, 2:41pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/33 "2022-09-07T14:41:05Z")
@JamesLE we have new logs ```nohighlight requests.exceptions.SSLError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by SSLError(SSLError("bad handshake: SysCallError(104, 'ECONNRESET')"))) 2022-09-07 16:35:16,189:ERROR:certbot.log:An unexpected error occurred: 2022-09-07 16:35:16,539:DEBUG:certbot.main:certbot version: 0.31.0 2022-09-07 16:35:16,539:DEBUG:certbot.main:Arguments: ['--domains', 'dites.lldikti2.id'] 2022-09-07 16:35:16,539:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2022-09-07 16:35:16,546:DEBUG:certbot.log:Root logging level set at 20 2022-09-07 16:35:16,546:INFO:certbot.log:Saving debug log to /var/log/letsencrypt/letsencrypt.log 2022-09-07 16:35:16,547:INFO:certbot.storage:Attempting to parse the version 1.5.0 renewal configuration file found at /etc/letsencrypt/renewal/www.lldikti2.id.conf with version 0.31.0 of Certbot. This might not work. ``` can you help me ---
**Author:** ![jvanasco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jvanasco/32/55900_2.png) [@jvanasco](https://community.letsencrypt.org/u/jvanasco)\ **Post date:** [September 7, 2022, 2:41pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/34 "2022-09-07T14:41:32Z")
Definitely not an IP block. You have very recent libraries, which should work without issue. This is likely either a firewall issue on your end, or something messed up your server. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [September 7, 2022, 3:03pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/35 "2022-09-07T15:03:09Z")
These seem to conflict: > [@gibrandev](#): > > `certbot version: 0.31.0` > [@gibrandev](#): > > `/snap/core20/1611 [certbot 1.29.0]` ---
**Author:** ![gibrandev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/gibrandev/32/63788_2.png) [@gibrandev](https://community.letsencrypt.org/u/gibrandev)\ **Post date:** [September 7, 2022, 3:04pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/36 "2022-09-07T15:04:21Z")
do you have a solution? ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [September 7, 2022, 3:15pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/37 "2022-09-07T15:15:35Z")
Do you have multiple versions of `certbot` installed? If so, remove all except the latest one. ---
**Author:** ![gibrandev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/gibrandev/32/63788_2.png) [@gibrandev](https://community.letsencrypt.org/u/gibrandev)\ **Post date:** [September 7, 2022, 3:17pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/38 "2022-09-07T15:17:28Z")
yes, from ISPConfig and manual via apt. From this i am have done to uninstall from apt, and running from ISPConfig error is the same. ---
**Author:** ![gibrandev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/gibrandev/32/63788_2.png) [@gibrandev](https://community.letsencrypt.org/u/gibrandev)\ **Post date:** [September 7, 2022, 3:48pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/39 "2022-09-07T15:48:18Z")
Case close with config ```nohighlight --server https://api.buypass.com/acme/directory ``` I don't now what happed with ```nohighlight acme-v02.api.letsencrypt.org ``` ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [October 7, 2022, 3:48pm UTC](https://community.letsencrypt.org/t/unblock-ip-address/184081/40 "2022-10-07T15:48:48Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed. [Previous page](https://community.letsencrypt.org/t/unblock-ip-address/184081.md?page=1)