Letsencrypt error Nonce is empty. Exiting. dig output of acme-v01.api.letsencrypt.org

ikkeben

Verified User
Joined
May 22, 2014
Messages
1,558
Location
Netherlands Germany
Letsencrypt DNS Nonce is empty. Exiting. dig output of acme-v01.api.letsencrypt.org

( when with DNS problems one or some LEtsencrypt server not available then some other LE server should take it over?)

Edit update: problem is some DNS problems AT HOSTER at this moment for readers here then this kind of errors could hapen, thats LETSENCRYPT server and sites with SSL not working while LE servers for OCSP not resolving / reachable

SO solved by them for now!

2.0.0 (rev: 1774) DA lateST version custombuild CENTOS 7.4 manual and automatic error LE, lates LE script and so on.
bug, AND ERROR, SO IF ERROR THE bug FOR NOT WORKING ANYMORE

Was working ok for over a year!


Cannot Execute Your Request


Details

Getting challenge for from acme-server...
Nonce is empty. Exiting. dig output of acme-v01.api.letsencrypt.org:

; <<>> DiG 9.9.4-RedHat-9.9.4-51.el7 <<>> acme-v01.api.letsencrypt.org +short
;; global options: +cmd
;; connection timed out; no servers could be reached
Full nonce request output:

Status gives ok at LE site? updated 2 days ago it say there
acme-v01.api.letsencrypt.org (Production)
High Assurance Datacenter 1 High Assurance Datacenter 2

Operational
https://letsencrypt.status.io/


Is it posible to change the script that it is also try to reach the other LE datacenters? ( ore is the acme one the only one working for DA LE SSL CERTS? )

PINGing that server from out WINDOWS 10 is working though

For that domains the autorenewal going wrong https is not working anymore problems with tls handshake , but DA control panel is saying cert should be: Certificate Expiry Jan 8 21:41:46 2018 GMT

When calling that https: sites after faulty autorenewal>

OCSP-server error. Foutcode: SEC_ERROR_OCSP_TRY_SERVER_LATER

Also a overview is needed now for when autorenewal for other domains is done now to protect them for going offline also

[Sun Dec 10 02:24:01.250957 2017] [ssl:error] [pid 5267:tid 139777823074048] (EAI 2)Name or service not known: [client 66.249.79.91:45303] AH01972: could not resolve address of OCSP responder ocsp.int-x3.letsencrypt.org
[Sun Dec 10 02:24:41.309734 2017] [ssl:error] [pid 5267:tid 139777974142720] (EAI 2)Name or service not known: [client 157.55.39.250:20625] AH01972: could not resolve address of OCSP responder ocsp.int-x3.letsencrypt.org
[Sun Dec 10 02:25:21.337337 2017] [ssl:error] [pid 5267:tid 139778100033280] (EAI 2)Name or service not known: [client 66.249.79.48:36414] AH01972: could not resolve address of OCSP responder ocsp.int-x3.letsencrypt.org
 
Last edited:
Back
Top