Weird Timeout error, xxx.net works, www.xxx.net times out

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: kleinhomer.net

I ran this command: certbot renew

It produced this output:
Processing /etc/letsencrypt/renewal/kleinhomer.net.conf


Cert is due for renewal, auto-renewing...
Could not find ssl_module; not disabling session tickets.
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for kleinhomer.net
http-01 challenge for www.kleinhomer.net
Waiting for verification...
Challenge failed for domain kleinhomer.net
http-01 challenge for kleinhomer.net
Cleaning up challenges
Attempting to renew cert (kleinhomer.net) from /etc/letsencrypt/renewal/kleinhomer.net.conf produced an unexpected error: Some challenges have failed.. Skipping.

My web server is (include version): Apache version 2.4.51

The operating system my web server runs on is (include version): Open SUSE 15.3
Linux 5.3.18-150300.59.101-default on x86_64

My hosting provider, if applicable, is: N/A VMWare VM

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 1.4.0

I have three name based virtual hosts. This is the middle one, the other two work. Everything looks the same on the config files for all three and I can reach http and https on all three from outside. This exact config has worked for some time now, no changes other than standard OS patches.

Welcome to the community @Kevin_K

It looks like your DNS might be wrong. Have you changed the IP address lately? Because your apex and www domain are different

dig +noall +answer kleinhomer.net
kleinhomer.net.         252     IN      A       98.114.38.95
dig +noall +answer www.kleinhomer.net
www.kleinhomer.net.     270     IN      A       68.80.215.29

I can get an HTTP response from www but not the apex

3 Likes

Also, that could use an update.

4 Likes

Thank you! Yes it was recently changed and one did not take. I just updated it, TTL of about 30 mins. Appreciate the quick look and response !

2 Likes

YW. LE Servers lookup the authoritative DNS servers so you are probably ok to try now

4 Likes

Worked perfectly this time, Thanks again !

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.