Unsupported version of SSL with Certbot snap, Nginx, and Raspbian 11 Bullseye

Help
1

My domain is:

https://amccolm.codes

I ran this command:

Yesterday, I tried this with an older Raspbian (Stretch) both with a python venv and pip and with the snap, went furthest with the pip route and ended up with this same error, SSL_ERROR_UNSUPPORTED_VERSION.

Today, followed instructions for setting up Certbot for Nginx running on Debian 10, as it seemed to be the
closest option to Raspbian 11.

It produced this output:

Set up process seems to go fine. But when I connect to the site, firefox has this error:

Secure Connection Failed

An error occurred during a connection to amccolm.codes. Peer using unsupported version of security protocol.

Error code: SSL_ERROR_UNSUPPORTED_VERSION

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

This website might not support the TLS 1.2 protocol, which is the minimum version supported by Firefox.

My web server is (include version):

nginx 1.18.0

The operating system my web server runs on is (include version):

Raspbian 11 (Bullseye)

My hosting provider, if applicable, is:

I am self hosting on my rpi 3. I've just put a newer version of raspbian on its sd card. So I no longer have an outdated version of Python and installing the snap also worked now.

I can login to a root shell on my machine (yes or no, or I don't know):

Yes, I can, I am using ssh over LAN.

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

cartbot 2.9.0

2

Have you opened port 443 and forwarded it (if necessary) to your nginx server?

Because port 80 (HTTP) requests work fine but port 443 (HTTPS) get "refused"

curl -I https://amccolm.codes/
curl: (7) Failed to connect to amccolm.codes port 443 after 76 ms: 
Connection refused

curl -I http://amccolm.codes/
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0
Location: https://amccolm.codes/

Also see:
https://www.ssllabs.com/ssltest/analyze.html?d=amccolm.codes&hideResults=on

4 Likes
3

Thanks for your help and replying so fast.

I've just opened port 443 in my router config.

It looks like I can connect to my site with https now. Wow, that was easy.

3 Likes
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.