We had issues validating via http, until we found out our Geo blocking rule in the Firewall was blocking the second validation attempt from LetsEncrypt. The connections come from Singapore and Sweden, so we whitelisted them. Instead, we want to whitelist the IPs used in the letsEncrypt validation p…

If you absolutely need to block general incoming http requests consider whether you can instead allow all incoming http /.well-known/acme-challenge requests by inspecting http traffic at the firewall, this would allow http validation to work normally. Alternatively, use DNS domain validation instead…

Whitelist LetsEncrypt Server IPs

Help

JamesLE May 15, 2024, 3:52am 7

Please see: Unexpected renewal failures during April 2024? Please read this!

6 Likes

Topic		Replies	Views
Let's Encrypt IP Addresses Used for Validation Help	9	29881	August 11, 2020
Alternative for allowing letsencrypt file auth connections for a geo-restricted server Feature Requests	41	364	December 17, 2024
Servers and IP addresses used by Let's Encrypt Help	7	22298	June 14, 2024
Firewall blocking Let's Encrypt IPs Help	23	16317	March 12, 2023
Problem with LetEncrypt validation after blocking all server IPs Help	14	397	October 1, 2024

Whitelist LetsEncrypt Server IPs

Related topics