• Hi, Pleskians! We are running a UX testing of our upcoming product intended for server management and monitoring.
    We would like to invite you to have a call with us and have some fun checking our prototype. The agenda is pretty simple - we bring new design and some scenarios that you need to walk through and succeed. We will be watching and taking insights for further development of the design.
    If you would like to participate, please use this link to book a meeting. We will sent the link to the clickable prototype at the meeting.
  • (Plesk for Windows):
    MySQL Connector/ODBC 3.51, 5.1, and 5.3 are no longer shipped with Plesk because they have reached end of life. MariaDB Connector/ODBC 64-bit 3.2.4 is now used instead.
  • Our UX team believes in the in the power of direct feedback and would like to invite you to participate in interviews, tests, and surveys.
    To stay in the loop and never miss an opportunity to share your thoughts, please subscribe to our UX research program. If you were previously part of the Plesk UX research program, please re-subscribe to continue receiving our invitations.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.

Question Let's Encrypt fail over IPv6

C

Creativados

Basic Pleskian
Server operating system version
Debian 10.13
Plesk version and microupdate number
Versión 18.0.47
Sorry my english, use translator.

I'm having trouble getting ssl certificates with Let's Encrypt .

When I try to get the certificate it returns this error

Captura de pantalla 2022-11-03 055030.png

when I try to pass the debug it tells me this

Test result for aceval.eu: Error

2 unique issue(s) detected (AAAANotWorking, IssueFromLetsEncrypt)
letsdebug.net
1667451139601.png

I think I have the server properly configured with IPv6, but I don't know what to think


.\curl.exe -6 aceval.eu

return this

curl: (7) Couldn't connect to server


Any ideas or help.

Thank you
 
aceval.eu has an AAAA (IPv6) record (2001:41d0:203:4b76:)
Click to expand...

But I see:

# host aceval.eu
aceval.eu has address 51.83.2.118
aceval.eu has IPv6 address 2001:41d0:701:1000::14cb

Are sure that AAAA record is correctly configured in DNS settings?
 
My result this command

# host aceval.eu
aceval.eu has address 51.83.2.118
aceval.eu has IPv6 address 2001:41d0:203:4b76::
aceval.eu mail is handled by 10 aceval.eu.
 
Creativados said:
My result this command

# host aceval.eu
aceval.eu has address 51.83.2.118
aceval.eu has IPv6 address 2001:41d0:203:4b76::
aceval.eu mail is handled by 10 aceval.eu.
Click to expand...
Yes, I see the same now.
Is the problem still actual?
 
Do you have an enabled firewall? Try to disable it.
 
@Creativados ,
please be sure that your site available via IPv6.
LE has a priority: it uses IPv6 in case AAAA record exists. so it looks like some misconfiguration on your side.
 
You have a firewall and dns (your two nameservers have different config for this domain) and/or ip configuration problem
I randomly get "2001:41d0:701:1000::14cb" or "2001:41d0:203:4b76::" as the AAAA record for aceval.eu, depending on the nameserver I ask.

And on both IPv6 addresses your webserver is not reachable... (IPv4 is OK)

aceval.png
 
ChristophRo said:
You have a firewall and dns (your two nameservers have different config for this domain) and/or ip configuration problem
I randomly get "2001:41d0:701:1000::14cb" or "2001:41d0:203:4b76::" as the AAAA record for aceval.eu, depending on the nameserver I ask.

And on both IPv6 addresses your webserver is not reachable... (IPv4 is OK)

View attachment 21853
Click to expand...
2001:41d0:701:1000::14cb
It was a server configuration error, but I don't know how to get rid of that IP trace

with what NS do you get that name resolution?
 
Other domain, afartis.com1667487860544.png

but not resolve
# dig +short aaaa afartis.com @sdns2.ovh.net

Ans ys resolve my server
# dig +short aaaa afartis.com @hosting.servidor-nombres.com
2001:41d0:203:4b76::


I'm lost
 
You must log in or register to reply here.

Similar threads

V
Issue Failed to reassign let's encrypt
Replies
1
Views
200
Aleksei Fedorov
A
R
Issue Problems Issuing a Let's Encrypt Certificate
Replies
6
Views
705
Robin McDermott
R
D
Resolved Let's Encrypt Certificate missing domain name
Replies
2
Views
374
davorg
D
D
Issue Lets Encrypt Not Successful over port 80
Replies
8
Views
3K
Daiv
D
H
Resolved Problem with install Let's Encrypt SSL/TLS certificate
Replies
6
Views
1K
HungLuu
H
Back
Top