{"action":"created","issue":{"url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/55","repository_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion","labels_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/55/labels{/name}","comments_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/55/comments","events_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/55/events","html_url":"https://github.com/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/55","id":150764128,"number":55,"title":"Still issues with auto-renew - 503?","user":{"login":"falcon15500","id":10264647,"avatar_url":"https://avatars.githubusercontent.com/u/10264647?v=3","gravatar_id":"","url":"https://api.github.com/users/falcon15500","html_url":"https://github.com/falcon15500","followers_url":"https://api.github.com/users/falcon15500/followers","following_url":"https://api.github.com/users/falcon15500/following{/other_user}","gists_url":"https://api.github.com/users/falcon15500/gists{/gist_id}","starred_url":"https://api.github.com/users/falcon15500/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/falcon15500/subscriptions","organizations_url":"https://api.github.com/users/falcon15500/orgs","repos_url":"https://api.github.com/users/falcon15500/repos","events_url":"https://api.github.com/users/falcon15500/events{/privacy}","received_events_url":"https://api.github.com/users/falcon15500/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-04-25T06:36:11Z","updated_at":"2016-04-28T06:13:43Z","closed_at":null,"body":"Hi,\r\n\r\nI fixed my previous issues with renewal, however I am still having issues.  I have all of my addresses on the one SAN certificate (great feature).  Creating the cert was no problem, however the renewal doesn't seem to work.  Checking the logs it seems that the validation (via the .well-known/acme-challenge thing) doesn't work.\r\n\r\nThe debug logs show:\r\n\r\n> 2016-04-25 06:18:39,767:DEBUG:acme.challenges:263: Verifying http-01 at http://couch.nine-hells.net/.well-known/acme-challenge/zk0acTDR1rJ4seBosynJA5niKsJU0nKqD_STKwBtkD0...\r\n> \r\n> 2016-04-25 06:18:39,768:INFO:requests.packages.urllib3.connectionpool:207: Starting new HTTP connection (1): couch.nine-hells.net\r\n> \r\n> 2016-04-25 06:18:39,922:DEBUG:requests.packages.urllib3.connectionpool:387: \"GET /.well-known/acme-challenge/zk0acTDR1rJ4seBosynJA5niKsJU0nKqD_STKwBtkD0 HTTP/1.1\" 503 213\r\n> \r\n> 2016-04-25 06:18:39,922:DEBUG:acme.challenges:270: Received <Response [503]>: <html>\r\n> <head><title>503 Service Temporarily Unavailable</title></head>\r\n> <body bgcolor=\"white\">\r\n> <center><h1>503 Service Temporarily Unavailable</h1></center>\r\n> <hr><center>nginx/1.9.14</center>\r\n> </body>\r\n> </html>\r\n> . Headers: {'Date': 'Mon, 25 Apr 2016 06:18:39 GMT', 'Content-Length': '213', 'Content-Type': 'text/html', 'Connection': 'keep-alive', 'Server': 'nginx/1.9.14'}\r\n> \r\n> 2016-04-25 06:18:39,922:DEBUG:acme.challenges:276: Key authorization from response (u'zk0acTDR1rJ4seBosynJA5niKsJU0nKqD_STKwBtkD0.yCerLuhuTaQrEdvYLhNIzp_RW3EKJ1A8FXwQUyl8oqw') doesn't match HTTP response (u'<html>\\r\\n<head><title>503 Service Temporarily Unavailable</title></head>\\r\\n<body bgcolor=\"white\">\\r\\n<center><h1>503 Service Temporarily Unavailable</h1></center>\\r\\n<hr><center>nginx/1.9.14</center>\\r\\n</body>\\r\\n</html>')\r\n> \r\n> 2016-04-25 06:18:39,923:WARNING:simp_le:1292: couch.nine-hells.net was not successfully self-verified. CA is likely to fail as well!\r\n\r\nAnd the access log for the nginx container shows:\r\n\r\n`couch.nine-hells.net 60.240.175.196 - - [25/Apr/2016:06:18:39 +0000] \"GET /.well-known/acme-challenge/zk0acTDR1rJ4seBosynJA5niKsJU0nKqD_STKwBtkD0 HTTP/1.1\" 503 213 \"-\" \"python-requests/2.8.1\"\r\ncouch.nine-hells.net 66.133.109.36 - - [25/Apr/2016:06:18:40 +0000] \"GET /.well-known/acme-challenge/zk0acTDR1rJ4seBosynJA5niKsJU0nKqD_STKwBtkD0 HTTP/1.1\" 503 213 \"-\" \"Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)\"`\r\n\r\nHowever, I just stopped the companion container, deleted all the old cert data and restarted the companion.  New certificate is generated without any issues (none of the other containers were stopped, started or otherwise touched) and the nginx access logs show:\r\n\r\n`couch.nine-hells.net 60.240.175.196 - - [25/Apr/2016:06:22:20 +0000] \"GET /.well-known/acme-challenge/XihsBP2JxaZHA0j_n8Jl4S_EiEH2k8mCETC0dQ09v6U HTTP/1.1\" 200 87 \"-\" \"python-requests/2.8.1\"\r\ncouch.nine-hells.net 66.133.109.36 - - [25/Apr/2016:06:22:21 +0000] \"GET /.well-known/acme-challenge/XihsBP2JxaZHA0j_n8Jl4S_EiEH2k8mCETC0dQ09v6U HTTP/1.1\" 200 87 \"-\" \"Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)\"`\r\n\r\nIt doesn't make sense?  Surely they use the same verification method?  Why would creation work without any issues, but the same setup fails to verify for renewal?  What is different about the two scenarios?\r\n\r\nI can schedule a script to stop the app, delete the certs and restart the app every coulple of months to workaround this - but I would obviously rather have this working as intended.\r\n\r\nAny ideas?\r\n\r\nMike"},"comment":{"url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/comments/215319205","html_url":"https://github.com/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/55#issuecomment-215319205","issue_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/55","id":215319205,"user":{"login":"falcon15500","id":10264647,"avatar_url":"https://avatars.githubusercontent.com/u/10264647?v=3","gravatar_id":"","url":"https://api.github.com/users/falcon15500","html_url":"https://github.com/falcon15500","followers_url":"https://api.github.com/users/falcon15500/followers","following_url":"https://api.github.com/users/falcon15500/following{/other_user}","gists_url":"https://api.github.com/users/falcon15500/gists{/gist_id}","starred_url":"https://api.github.com/users/falcon15500/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/falcon15500/subscriptions","organizations_url":"https://api.github.com/users/falcon15500/orgs","repos_url":"https://api.github.com/users/falcon15500/repos","events_url":"https://api.github.com/users/falcon15500/events{/privacy}","received_events_url":"https://api.github.com/users/falcon15500/received_events","type":"User","site_admin":false},"created_at":"2016-04-28T06:13:43Z","updated_at":"2016-04-28T06:13:43Z","body":"Here is a copy of my nginx default.conf:\r\n\r\n[default.conf.txt](https://github.com/JrCs/docker-letsencrypt-nginx-proxy-companion/files/239912/default.conf.txt)\r\n\r\nI am no NGINX expert, but it appears to be fine to me.  And the sites work fine over HTTPS.\r\n"}}