-
Notifications
You must be signed in to change notification settings - Fork 832
Open
Description
Hi,
I'm trying to generate some certs all using docker using zerossl, aws and dns-01 but the certificates never seem to generate, I keep getting the following error.
Info: running acme-companion version v2.6.1-24-g271f91a
Info: Setting up 4096 bits RFC7919 Diffie-Hellman group...
Reloading nginx proxy (nginx-proxy)...
2025/11/06 16:52:13 Generated '/etc/nginx/conf.d/default.conf' from 6 containers
2025/11/06 16:52:13 [notice] 101#101: signal process started
2025/11/06 16:52:13 Generated '/app/letsencrypt_service_data' from 6 containers
2025/11/06 16:52:13 Running '/app/signal_le_service'
2025/11/06 16:52:13 Watching docker events
2025/11/06 16:52:13 Contents of /app/letsencrypt_service_data did not change. Skipping notification '/app/signal_le_service'
Creating/renewal my.domain certificates... (my.domain)
https://github.com/acmesh-official/acme.sh
v3.1.1
[Thu Nov 6 16:52:14 UTC 2025] Using CA: https://acme.zerossl.com/v2/DV90
[Thu Nov 6 16:52:14 UTC 2025] Using pre-generated key: /etc/acme.sh/myemail@mycompany.com/my.domain/my.domain.key.next
[Thu Nov 6 16:52:14 UTC 2025] Generating next pre-generate key.
[Thu Nov 6 16:52:15 UTC 2025] Single domain='my.domain'
[Thu Nov 6 16:52:18 UTC 2025] Getting webroot for domain='my.domain'
[Thu Nov 6 16:52:19 UTC 2025] Verifying: my.domain
[Thu Nov 6 16:52:19 UTC 2025] Processing. The CA is processing your order, please wait. (1/30)
[Thu Nov 6 16:52:22 UTC 2025] The retryafter=86400 value is too large (> 600), will not retry anymore.
[Thu Nov 6 16:52:22 UTC 2025] Please check log file for more details: /dev/null
Sleep for 3600s
2025/11/06 16:52:43 Received event health_status: healthy for container a922996b837d
2025/11/06 16:52:46 Received signal: terminated
2025/11/06 16:52:46 Received signal: terminated
Info: running acme-companion version v2.6.1-24-g271f91a
Info: Setting up 4096 bits RFC7919 Diffie-Hellman group...
Reloading nginx proxy (nginx-proxy)...
2025/11/06 16:53:11 Generated '/etc/nginx/conf.d/default.conf' from 6 containers
2025/11/06 16:53:11 [notice] 154#154: signal process started
2025/11/06 16:53:11 Contents of /app/letsencrypt_service_data did not change. Skipping notification '/app/signal_le_service'
2025/11/06 16:53:11 Watching docker events
2025/11/06 16:53:11 Contents of /app/letsencrypt_service_data did not change. Skipping notification '/app/signal_le_service'
https://github.com/acmesh-official/acme.sh
v3.1.1
[Thu Nov 6 16:53:12 UTC 2025] Account key creation OK.
[Thu Nov 6 16:53:12 UTC 2025] No EAB credentials found for ZeroSSL, let's obtain them
[Thu Nov 6 16:53:14 UTC 2025] Registering account: https://acme.zerossl.com/v2/DV90
[Thu Nov 6 16:53:15 UTC 2025] Registered
[Thu Nov 6 16:53:15 UTC 2025] ACCOUNT_THUMBPRINT='h83ew3Ik1ygGvEEcBp5aKdnjY60fiDR1k6fIszdeDW8'
Creating/renewal my.domain certificates... (my.domain)
https://github.com/acmesh-official/acme.sh
v3.1.1
[Thu Nov 6 16:53:16 UTC 2025] Using CA: https://acme.zerossl.com/v2/DV90
[Thu Nov 6 16:53:16 UTC 2025] Creating domain key
[Thu Nov 6 16:53:17 UTC 2025] The domain key is here: /etc/acme.sh/myemail@mycompany.com/my.domain/my.domain.key
[Thu Nov 6 16:53:17 UTC 2025] Generating next pre-generate key.
[Thu Nov 6 16:53:18 UTC 2025] Single domain='my.domain'
[Thu Nov 6 16:53:21 UTC 2025] Getting webroot for domain='my.domain'
[Thu Nov 6 16:53:21 UTC 2025] Verifying: my.domain
[Thu Nov 6 16:53:22 UTC 2025] Processing. The CA is processing your order, please wait. (1/30)
[Thu Nov 6 16:53:30 UTC 2025] Pending. The CA is processing your order, please wait. (2/30)
[Thu Nov 6 16:53:38 UTC 2025] Pending. The CA is processing your order, please wait. (3/30)
[Thu Nov 6 16:53:46 UTC 2025] Pending. The CA is processing your order, please wait. (4/30)
[Thu Nov 6 16:53:54 UTC 2025] Pending. The CA is processing your order, please wait. (5/30)
[Thu Nov 6 16:54:02 UTC 2025] Pending. The CA is processing your order, please wait. (6/30)
[Thu Nov 6 16:54:10 UTC 2025] Pending. The CA is processing your order, please wait. (7/30)
[Thu Nov 6 16:54:17 UTC 2025] Pending. The CA is processing your order, please wait. (8/30)
[Thu Nov 6 16:54:25 UTC 2025] Pending. The CA is processing your order, please wait. (9/30)
[Thu Nov 6 16:54:33 UTC 2025] Pending. The CA is processing your order, please wait. (10/30)
[Thu Nov 6 16:54:41 UTC 2025] Pending. The CA is processing your order, please wait. (11/30)
[Thu Nov 6 16:54:50 UTC 2025] Pending. The CA is processing your order, please wait. (12/30)
[Thu Nov 6 16:54:58 UTC 2025] Pending. The CA is processing your order, please wait. (13/30)
[Thu Nov 6 16:55:05 UTC 2025] Pending. The CA is processing your order, please wait. (14/30)
[Thu Nov 6 16:55:14 UTC 2025] Pending. The CA is processing your order, please wait. (15/30)
[Thu Nov 6 16:55:22 UTC 2025] Pending. The CA is processing your order, please wait. (16/30)
[Thu Nov 6 16:55:25 UTC 2025] The retryafter=86400 value is too large (> 600), will not retry anymore.
[Thu Nov 6 16:55:25 UTC 2025] Please check log file for more details: /dev/null
Sleep for 3600s
2025/11/06 17:00:48 Received signal: terminated
2025/11/06 17:00:48 Received signal: terminated
These are the ENV Vars I have set on the acme-companiion container are
environment:
- NGINX_PROXY_CONTAINER=nginx-proxy
- DEFAULT_EMAIL=myemail@mycompany.com
- ACME_CA_URI=https://acme.zerossl.com/v2/DV90
#- ACME_CA_URI=https://acme-staging-v02.api.letsencrypt.org/directory
- ACME_CHALLENGE_TYPE=DNS-01
- DNS_API=dns_aws
- AWS_ACCESS_KEY_ID=myid
- AWS_SECRET_ACCESS_KEY=mykey
- AWS_REGION=my-region-1
- DEBUG=1and these are the ENV Vars I have set on the app Container
environment:
- VIRTUAL_HOST=my.domain
- LETSENCRYPT_HOST=my.domain
- LETSENCRYPT_EMAIL=myemail@mycompany.com- When I use these setting with the acme.sh script on the same machine it works correctly.
- The application is working correctly as I can access via port 80.
- Even if I wait beyond the timeout the same error message appears
Metadata
Metadata
Assignees
Labels
No labels