Skip to content

Certificates are not generated #1221

@AlistairMaccallum

Description

@AlistairMaccallum

Hi,

I'm trying to generate some certs all using docker using zerossl, aws and dns-01 but the certificates never seem to generate, I keep getting the following error.

Info: running acme-companion version v2.6.1-24-g271f91a
Info: Setting up 4096 bits RFC7919 Diffie-Hellman group...
Reloading nginx proxy (nginx-proxy)...
2025/11/06 16:52:13 Generated '/etc/nginx/conf.d/default.conf' from 6 containers
2025/11/06 16:52:13 [notice] 101#101: signal process started
2025/11/06 16:52:13 Generated '/app/letsencrypt_service_data' from 6 containers
2025/11/06 16:52:13 Running '/app/signal_le_service'
2025/11/06 16:52:13 Watching docker events
2025/11/06 16:52:13 Contents of /app/letsencrypt_service_data did not change. Skipping notification '/app/signal_le_service'
Creating/renewal my.domain certificates... (my.domain)
https://github.com/acmesh-official/acme.sh
v3.1.1
[Thu Nov  6 16:52:14 UTC 2025] Using CA: https://acme.zerossl.com/v2/DV90
[Thu Nov  6 16:52:14 UTC 2025] Using pre-generated key: /etc/acme.sh/myemail@mycompany.com/my.domain/my.domain.key.next
[Thu Nov  6 16:52:14 UTC 2025] Generating next pre-generate key.
[Thu Nov  6 16:52:15 UTC 2025] Single domain='my.domain'
[Thu Nov  6 16:52:18 UTC 2025] Getting webroot for domain='my.domain'
[Thu Nov  6 16:52:19 UTC 2025] Verifying: my.domain
[Thu Nov  6 16:52:19 UTC 2025] Processing. The CA is processing your order, please wait. (1/30)
[Thu Nov  6 16:52:22 UTC 2025] The retryafter=86400 value is too large (> 600), will not retry anymore.
[Thu Nov  6 16:52:22 UTC 2025] Please check log file for more details: /dev/null
Sleep for 3600s
2025/11/06 16:52:43 Received event health_status: healthy for container a922996b837d
2025/11/06 16:52:46 Received signal: terminated
2025/11/06 16:52:46 Received signal: terminated
Info: running acme-companion version v2.6.1-24-g271f91a
Info: Setting up 4096 bits RFC7919 Diffie-Hellman group...
Reloading nginx proxy (nginx-proxy)...
2025/11/06 16:53:11 Generated '/etc/nginx/conf.d/default.conf' from 6 containers
2025/11/06 16:53:11 [notice] 154#154: signal process started
2025/11/06 16:53:11 Contents of /app/letsencrypt_service_data did not change. Skipping notification '/app/signal_le_service'
2025/11/06 16:53:11 Watching docker events
2025/11/06 16:53:11 Contents of /app/letsencrypt_service_data did not change. Skipping notification '/app/signal_le_service'
https://github.com/acmesh-official/acme.sh
v3.1.1
[Thu Nov  6 16:53:12 UTC 2025] Account key creation OK.
[Thu Nov  6 16:53:12 UTC 2025] No EAB credentials found for ZeroSSL, let's obtain them
[Thu Nov  6 16:53:14 UTC 2025] Registering account: https://acme.zerossl.com/v2/DV90
[Thu Nov  6 16:53:15 UTC 2025] Registered
[Thu Nov  6 16:53:15 UTC 2025] ACCOUNT_THUMBPRINT='h83ew3Ik1ygGvEEcBp5aKdnjY60fiDR1k6fIszdeDW8'
Creating/renewal my.domain certificates... (my.domain)
https://github.com/acmesh-official/acme.sh
v3.1.1
[Thu Nov  6 16:53:16 UTC 2025] Using CA: https://acme.zerossl.com/v2/DV90
[Thu Nov  6 16:53:16 UTC 2025] Creating domain key
[Thu Nov  6 16:53:17 UTC 2025] The domain key is here: /etc/acme.sh/myemail@mycompany.com/my.domain/my.domain.key
[Thu Nov  6 16:53:17 UTC 2025] Generating next pre-generate key.
[Thu Nov  6 16:53:18 UTC 2025] Single domain='my.domain'
[Thu Nov  6 16:53:21 UTC 2025] Getting webroot for domain='my.domain'
[Thu Nov  6 16:53:21 UTC 2025] Verifying: my.domain
[Thu Nov  6 16:53:22 UTC 2025] Processing. The CA is processing your order, please wait. (1/30)
[Thu Nov  6 16:53:30 UTC 2025] Pending. The CA is processing your order, please wait. (2/30)
[Thu Nov  6 16:53:38 UTC 2025] Pending. The CA is processing your order, please wait. (3/30)
[Thu Nov  6 16:53:46 UTC 2025] Pending. The CA is processing your order, please wait. (4/30)
[Thu Nov  6 16:53:54 UTC 2025] Pending. The CA is processing your order, please wait. (5/30)
[Thu Nov  6 16:54:02 UTC 2025] Pending. The CA is processing your order, please wait. (6/30)
[Thu Nov  6 16:54:10 UTC 2025] Pending. The CA is processing your order, please wait. (7/30)
[Thu Nov  6 16:54:17 UTC 2025] Pending. The CA is processing your order, please wait. (8/30)
[Thu Nov  6 16:54:25 UTC 2025] Pending. The CA is processing your order, please wait. (9/30)
[Thu Nov  6 16:54:33 UTC 2025] Pending. The CA is processing your order, please wait. (10/30)
[Thu Nov  6 16:54:41 UTC 2025] Pending. The CA is processing your order, please wait. (11/30)
[Thu Nov  6 16:54:50 UTC 2025] Pending. The CA is processing your order, please wait. (12/30)
[Thu Nov  6 16:54:58 UTC 2025] Pending. The CA is processing your order, please wait. (13/30)
[Thu Nov  6 16:55:05 UTC 2025] Pending. The CA is processing your order, please wait. (14/30)
[Thu Nov  6 16:55:14 UTC 2025] Pending. The CA is processing your order, please wait. (15/30)
[Thu Nov  6 16:55:22 UTC 2025] Pending. The CA is processing your order, please wait. (16/30)
[Thu Nov  6 16:55:25 UTC 2025] The retryafter=86400 value is too large (> 600), will not retry anymore.
[Thu Nov  6 16:55:25 UTC 2025] Please check log file for more details: /dev/null
Sleep for 3600s
2025/11/06 17:00:48 Received signal: terminated
2025/11/06 17:00:48 Received signal: terminated

These are the ENV Vars I have set on the acme-companiion container are

environment:
      - NGINX_PROXY_CONTAINER=nginx-proxy
      - DEFAULT_EMAIL=myemail@mycompany.com
      - ACME_CA_URI=https://acme.zerossl.com/v2/DV90
      #- ACME_CA_URI=https://acme-staging-v02.api.letsencrypt.org/directory
      - ACME_CHALLENGE_TYPE=DNS-01
      - DNS_API=dns_aws
      - AWS_ACCESS_KEY_ID=myid
      - AWS_SECRET_ACCESS_KEY=mykey
      - AWS_REGION=my-region-1
      - DEBUG=1

and these are the ENV Vars I have set on the app Container

    environment:
      - VIRTUAL_HOST=my.domain
      - LETSENCRYPT_HOST=my.domain
      - LETSENCRYPT_EMAIL=myemail@mycompany.com
  • When I use these setting with the acme.sh script on the same machine it works correctly.
  • The application is working correctly as I can access via port 80.
  • Even if I wait beyond the timeout the same error message appears

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions