[SOLVED] securing web server script for 2 nodes not working

[yaboc]

i have all the pre-reqs
but it fails with

Configuring Dehydrated locally...
Configuring Dehydrated on the peer...
Checking public HTTP-01 challenge access for every hostname...
Command failed: curl --fail --silent --show-error --location --insecure --connect-timeout 5 --max-time 15 http://myfspbx.floatingname.com/.well-known/acme-challenge/fspbx-preflight-6ff120bc5825e053. curl: (28) Connection timed out after 5002 milliseconds

and i dont see anything in acme-challenge folder on nodea (floatingname pointing to it) nor nodeb

i added myfspbx.floatingname.com to nodea hosts entry in addition to what's already there and everything worked!
Thanks

 

[pbxgeek]

Connection timed out after 5002 milliseconds

Yesterday, someone blocked their own IP in the firewall, and they got that exact error message. We unblocked it, and the ACME challenge succeeded.

Other possibilities:
1) Port 80 is blocked
2) Port 80 is geofenced and not open to the whole world. Let's Encrypt servers reach out from various locations to verify the ACME challenge.

 

[yaboc]

Connection timed out after 5002 milliseconds

Yesterday, someone blocked their own IP in the firewall, and they got that exact error message. We unblocked it, and the ACME challenge succeeded.

Other possibilities:
1) Port 80 is blocked
2) Port 80 is geofenced and not open to the whole world. Let's Encrypt servers reach out from various locations to verify the ACME challenge.

Thanks for the suggestions @pbxgeek . I'm behind NAT, so my internal IP has to resolve to both floating and nodea fqdn so the hosts file had to be updated with floating fqdn? which is what worked for me here.