Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot create certificates for v6-only hosts #102

Open
cbiedl opened this issue Nov 17, 2019 · 1 comment
Open

Cannot create certificates for v6-only hosts #102

cbiedl opened this issue Nov 17, 2019 · 1 comment

Comments

@cbiedl
Copy link

cbiedl commented Nov 17, 2019

(I might be quite wrong with all the following, it's mostly an observation)
When trying to create a certificate for a host that resolves to an IPv6 address only, the challenge is done via IPv6 as well, for obvious reasons.
acme-nosudo cannot deal with that, "BaseHTTPServer.HTTPServer(('0.0.0.0', 80)" is hard-coded but IPv4 only.
Workaround for me should be: "socat TCP6-LISTEN:80 TCP4:127.0.0.1:80" - not tested since LE doesn't like me now: "urllib2.HTTPError: HTTP Error 503: Service Temporarily Unavailable". Possibly since I've requested a challenge too often.

@ghost
Copy link

ghost commented Jun 19, 2020

(I might be quite wrong with all the following, it's mostly an observation)
When trying to create a certificate for a host that resolves to an IPv6 address only, the challenge is done via IPv6 as well, for obvious reasons.
acme-nosudo cannot deal with that, "BaseHTTPServer.HTTPServer(('0.0.0.0', 80)" is hard-coded but IPv4 only.
Workaround for me should be: "socat TCP6-LISTEN:80 TCP4:127.0.0.1:80" - not tested since LE doesn't like me now: "urllib2.HTTPError: HTTP Error 503: Service Temporarily Unavailable". Possibly since I've requested a challenge too often.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant