# Updating cert but server is not in default port 80

**URL:** <https://community.letsencrypt.org/t/updating-cert-but-server-is-not-in-default-port-80/17932>\
**Category:** Help\
**Created:** [July 15, 2016, 2:41pm UTC](https://community.letsencrypt.org/t/updating-cert-but-server-is-not-in-default-port-80/17932 "2016-07-15T14:41:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![edilmar](https://avatars.discourse-cdn.com/v4/letter/e/c67d28/32.png) [@edilmar](https://community.letsencrypt.org/u/edilmar)\
**Post date:** [July 15, 2016, 2:41pm UTC](https://community.letsencrypt.org/t/updating-cert-but-server-is-not-in-default-port-80/17932/1 "2016-07-15T14:41:10Z")

</div>

Please fill out the fields below so we can help you better.

My domain is:sitesat.intersite.com.br

I ran this command:./letsencrypt-auto certonly -c letsencrypt\_update.ini -d sitesat.intersite.com.br --http-01-port 81

It produced this output:  
/root/.local/share/letsencrypt/lib/python2.6/site-packages/cryptography/ **init**.py:26: DeprecationWarning: Python 2.6 is no longer supported by the Python core team, please upgrade your Python. A future version of cryptography will drop support for Python 2.6  
DeprecationWarning  
Failed authorization procedure. sitesat.intersite.com.br (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Could not connect to [http://sitesat.intersite.com.br/.well-known/acme-challenge/FgI1ZKXgbi2l4VoKjbjsE57AazrmsySiH9GkVroo-Ck](http://sitesat.intersite.com.br/.well-known/acme-challenge/FgI1ZKXgbi2l4VoKjbjsE57AazrmsySiH9GkVroo-Ck)

IMPORTANT NOTES:

- The following errors were reported by the server:

My operating system is (include version):CentOS 6.4

My web server is (include version):Apache 2.2.15+Glasfish 3.1.1

[root@IS230 letsencrypt]# cat letsencrypt\_update.ini  
rsa-key-size = 4096  
server = [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)  
authenticator = webroot  
text = True  
agree-tos = True  
renew-by-default = True  
email = edilmaralves@intersite.com.br  
webroot-path = /sistemas/sitesat2-cte

I look at these discussions, with no success:  
[https://community.letsencrypt.org/t/support-for-ports-other-than-80-and-443/3419/27](https://community.letsencrypt.org/t/support-for-ports-other-than-80-and-443/3419/27)  
[https://community.letsencrypt.org/t/http-access-only-through-port-8585/14515](https://community.letsencrypt.org/t/http-access-only-through-port-8585/14515)

---

<div class="post-metadata">

**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\
**Post date:** [July 15, 2016, 2:54pm UTC](https://community.letsencrypt.org/t/updating-cert-but-server-is-not-in-default-port-80/17932/2 "2016-07-15T14:54:33Z")

</div>

Before Let’s Encrypt will issue a certificate, they have to verify that you control the hostname(s) for which you’re requesting the cert. They currently have three ways of doing that: (1) HTTP authentication, (2) TLS authentication, and (3) DNS authentication.

HTTP authentication requires that they be able to connect, from the public Internet, to port 80 of each hostname for which you’re seeking a cert. You can specify a different port on the client, and it will listen on that port for the challenge, but the public Internet has to get its response on port 80.

The TLS challenge requires the same thing, but with port 443 rather than port 80.

If both ports 80 and 443 are blocked by your ISP, you should probably look at changing ISPs. However, you can also use the DNS challenge. This is not supported by certbot, but it is supported by many of the alternative clients, including [letsencrypt.sh](https://github.com/lukas2511/letsencrypt.sh), [acme.sh](https://github.com/Neilpang/acme.sh), and [lego](https://github.com/xenolf/lego).

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [August 14, 2016, 2:54pm UTC](https://community.letsencrypt.org/t/updating-cert-but-server-is-not-in-default-port-80/17932/3 "2016-08-14T14:54:47Z")

</div>

Closed on August 14, 2016, 2:54pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.