Authexception

[FerencSzekedi]

Hi!

I'm getting the following with kubernetes install with helm:

2024-02-13T23:12:17.958313313+01:00 stdout F "Timestamp": "2024:02:13 10:12:17.957897",
2024-02-13T23:12:17.958320895+01:00 stdout F "EventId": 0,
2024-02-13T23:12:17.958328036+01:00 stdout F "LogLevel": "Information",
2024-02-13T23:12:17.958335154+01:00 stdout F "Category": "KCert.Services.RenewalHandler",
2024-02-13T23:12:17.958342586+01:00 stdout F "Message": "Get Auth https://acme-v02.api.letsencrypt.org/acme/authz-v3/314917541677: invalid",
2024-02-13T23:12:17.958349164+01:00 stdout F "State": {
2024-02-13T23:12:17.958376735+01:00 stdout F "Message": "Get Auth https://acme-v02.api.letsencrypt.org/acme/authz-v3/314917541677: invalid",
2024-02-13T23:12:17.958383687+01:00 stdout F "authUri": "https://acme-v02.api.letsencrypt.org/acme/authz-v3/314917541677",
2024-02-13T23:12:17.95838958+01:00 stdout F "status": "invalid",
2024-02-13T23:12:17.958395821+01:00 stdout F "{OriginalFormat}": "Get Auth {authUri}: {status}"
2024-02-13T23:12:17.958401694+01:00 stdout F }
2024-02-13T23:12:17.958407781+01:00 stdout F }
2024-02-13T23:12:17.958995376+01:00 stdout F {
2024-02-13T23:12:17.959020204+01:00 stdout F "Timestamp": "2024:02:13 10:12:17.958265",
2024-02-13T23:12:17.959027292+01:00 stdout F "EventId": 0,
2024-02-13T23:12:17.959033209+01:00 stdout F "LogLevel": "Error",
2024-02-13T23:12:17.959039119+01:00 stdout F "Category": "KCert.Services.RenewalHandler",
2024-02-13T23:12:17.959045073+01:00 stdout F "Message": "Certificate renewal failed.",
2024-02-13T23:12:17.959055408+01:00 stdout F "Exception": "System.Exception: Auth https://acme-v02.api.letsencrypt.org/acme/authz-v3/314917541677 did not complete in time. Last Res>
2024-02-13T23:12:17.959061996+01:00 stdout F "State": {
2024-02-13T23:12:17.959067789+01:00 stdout F "Message": "Certificate renewal failed.",
2024-02-13T23:12:17.959073999+01:00 stdout F "{OriginalFormat}": "Certificate renewal failed."
2024-02-13T23:12:17.959079926+01:00 stdout F }
2024-02-13T23:12:17.95908565+01:00 stdout F }
2024-02-13T23:12:17.959809791+01:00 stdout F {
2024-02-13T23:12:17.959833412+01:00 stdout F "Timestamp": "2024:02:13 10:12:17.959030",
2024-02-13T23:12:17.959840049+01:00 stdout F "EventId": 0,
2024-02-13T23:12:17.959847247+01:00 stdout F "LogLevel": "Error",
2024-02-13T23:12:17.959853498+01:00 stdout F "Category": "KCert.Services.KCertClient",
2024-02-13T23:12:17.959860106+01:00 stdout F "Message": "Renewal failed",
2024-02-13T23:12:17.959876297+01:00 stdout F "Exception": "KCert.Models.RenewalException: Auth https://acme-v02.api.letsencrypt.org/acme/authz-v3/314917541677 did not complete in t>
2024-02-13T23:12:17.959882795+01:00 stdout F "State": {
2024-02-13T23:12:17.959889289+01:00 stdout F "Message": "Renewal failed",
2024-02-13T23:12:17.959895873+01:00 stdout F "{OriginalFormat}": "Renewal failed"

I have configured the deployment to use the generated secret and redeployed the ingress.
Where should I move from this to have the cert generated?

Thx for the help!

[nabsul]

Hi. My guess from the "did not complete in time" error message is that Let's Encrypt is unable to complete the challenge.

This is usually a problem with ingress / routing, where LEt's Encrypt is not able to communicate with KCert.

Hopefully this is helpful. In the coming weeks I'll be re-running KCert for testing a new release. If I think of further details I'll let you know.