{"action":"created","issue":{"url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/283","repository_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion","labels_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/283/labels{/name}","comments_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/283/comments","events_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/283/events","html_url":"https://github.com/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/283","id":274806542,"node_id":"MDU6SXNzdWUyNzQ4MDY1NDI=","number":283,"title":"ERROR:simp_le:1272: CA marked some of the authorizations as invalid [...]","user":{"login":"TheLux83","id":20551716,"node_id":"MDQ6VXNlcjIwNTUxNzE2","avatar_url":"https://avatars1.githubusercontent.com/u/20551716?v=4","gravatar_id":"","url":"https://api.github.com/users/TheLux83","html_url":"https://github.com/TheLux83","followers_url":"https://api.github.com/users/TheLux83/followers","following_url":"https://api.github.com/users/TheLux83/following{/other_user}","gists_url":"https://api.github.com/users/TheLux83/gists{/gist_id}","starred_url":"https://api.github.com/users/TheLux83/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheLux83/subscriptions","organizations_url":"https://api.github.com/users/TheLux83/orgs","repos_url":"https://api.github.com/users/TheLux83/repos","events_url":"https://api.github.com/users/TheLux83/events{/privacy}","received_events_url":"https://api.github.com/users/TheLux83/received_events","type":"User","site_admin":false},"labels":[{"id":843795356,"node_id":"MDU6TGFiZWw4NDM3OTUzNTY=","url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/labels/failing%20authorization","name":"failing authorization","color":"2a7793","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2017-11-17T09:44:08Z","updated_at":"2018-07-10T19:35:29Z","closed_at":null,"author_association":"NONE","body":"Hey there,\r\n\r\nI'm trying to get this companion running since a few days/weeks. I've had a few problems but I'm getting nearer and nearer on successing. But now I'm at the end für my knowledge-road.\r\n\r\nI've set up the nginx-proxy, docker-gen and this companion and everything seems to work just fine. At least when I' not using this companion.\r\nWhen I try to get a new SSL Certificate, I get the following error message:\r\n\r\n```\r\nnginx-letsencrypt    | 2017/11/17 09:32:46 Received event start for container 9ed4a9635a04\r\ndocker-gen           | 2017/11/17 09:32:46 Received event start for container 9ed4a9635a04\r\ndocker-gen           | 2017/11/17 09:32:46 Generated '/etc/nginx/conf.d/default.conf' from 11 containers\r\ndocker-gen           | 2017/11/17 09:32:46 Sending container 'nginx-proxy' signal '1'\r\nnginx-letsencrypt    | 2017/11/17 09:33:01 Debounce minTimer fired\r\nnginx-letsencrypt    | 2017/11/17 09:33:01 Generated '/app/letsencrypt_service_data' from 9 containers\r\nnginx-letsencrypt    | 2017/11/17 09:33:01 Running '/app/update_certs'\r\nnginx-letsencrypt    | Creating/renewal domain.tld certificates... (domain.tld sub.domain.tld)\r\nnginx-letsencrypt    | 2017-11-17 09:33:02,224:INFO:simp_le:1213: Generating new account key\r\nnginx-proxy          | sub.domain.tld 172.17.0.1 - - [17/Nov/2017:09:33:06 +0000] \"GET /.well-known/acme-challenge/tMZuivnTE_5-9R9KsaXMfgtTNztQe888ydZAj8FvaZU HTTP/1.1\" 200\r\n87 \"-\" \"python-requests/2.18.4\"\r\nnginx-letsencrypt    | 2017-11-17 09:33:06,454:INFO:simp_le:1306: sub.domain.tld was successfully self-verified\r\nnginx-letsencrypt    | 2017-11-17 09:33:07,113:WARNING:simp_le:1304: domain.tld was not successfully self-verified. CA is likely to fail as well!\r\nnginx-proxy          | sub.domain.tld 172.17.0.1 - - [17/Nov/2017:09:33:07 +0000] \"GET /.well-known/acme-challenge/tMZuivnTE_5-9R9KsaXMfgtTNztQe888ydZAj8FvaZU HTTP/1.1\" 200\r\n87 \"-\" \"Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)\"\r\nnginx-letsencrypt    | 2017-11-17 09:33:07,683:INFO:simp_le:1314: Generating new certificate private key\r\nnginx-letsencrypt    | 2017-11-17 09:33:08,754:ERROR:simp_le:1272: CA marked some of the authorizations as invalid, which likely means it could not access http://example.com/.well-\r\nknown/acme-challenge/X. Did you set correct path in -d example.com:path or --default_root? Is there a warning log entry about unsuccessful self-verification? Are all your domains a\r\nccessible from the internet? Failing authorizations: https://acme-v01.api.letsencrypt.org/acme/authz/Nlnr4bDUZihIGiLZJ67hxSx6WoFdZKTUvzY4wkPfsB4\r\nnginx-letsencrypt    | Challenge validation has failed, see error log.\r\nnginx-letsencrypt    |\r\nnginx-letsencrypt    | Debugging tips: -v improves output verbosity. Help is available under --help.\r\nnginx-letsencrypt    | Sleep for 3600s\r\n```\r\n\r\nI think it has something to do with my attempt to use a SAN-Certificate. I was trying to use them, because I was running against the limit when I tried several things.\r\n\r\nMy nginx-proxy comose file looks like this:\r\n```\r\nversion: '2'\r\n\r\nservices:\r\n  nginx-proxy:\r\n    image: nginx\r\n    network_mode: \"bridge\"\r\n    container_name: nginx-proxy\r\n    ports:\r\n      - \"80:80\"\r\n      - \"443:443\"\r\n    volumes:\r\n      - nginx_proxy_conf.d:/etc/nginx/conf.d\r\n      - nginx_proxy_vhost.d:/etc/nginx/vhost.d\r\n      - nginx_proxy_html:/usr/share/nginx/html\r\n      - nginx_proxy_certs:/etc/nginx/certs:ro\r\n    labels:\r\n      - \"com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy\"\r\n\r\n  docker-gen:\r\n    image: jwilder/docker-gen\r\n    network_mode: \"bridge\"\r\n    container_name: docker-gen\r\n    volumes_from: \r\n    - nginx-proxy\r\n    volumes:\r\n      - /var/run/docker.sock:/tmp/docker.sock:ro\r\n      - D:/Docker/nginx-proxy:/etc/docker-gen/templates\r\n    links:\r\n      - nginx-proxy\r\n    command: \"-notify-sighup nginx-proxy -watch /etc/docker-gen/templates/nginx.tmpl /etc/nginx/conf.d/default.conf\"\r\n    labels:\r\n      - \"com.github.jrcs.letsencrypt_nginx_proxy_companion.docker_gen\"\r\n    \r\n  nginx-letsencrypt:\r\n    image: jrcs/letsencrypt-nginx-proxy-companion\r\n    network_mode: \"bridge\"\r\n    container_name: nginx-letsencrypt\r\n    volumes_from:\r\n      - nginx-proxy\r\n    volumes:\r\n      - /var/run/docker.sock:/var/run/docker.sock:ro\r\n      - nginx_proxy_certs:/etc/nginx/certs:rw\r\n    environment:\r\n      - ACME_TOS_HASH=cc88d8d9517f490191401e7b54e9ffd12a2b9082ec7a1d4cec6101f9f1647e7b\r\nvolumes:\r\n  nginx_proxy_conf.d:\r\n  nginx_proxy_vhost.d:\r\n  nginx_proxy_html:\r\n  nginx_proxy_certs: \r\n```\r\nI'm using the actual ACME_TOS_HAS.\r\nMy compose file for my container looks like this:\r\n\r\n```\r\nversion: '2'\r\n\r\nservices:\r\n  nextcloud:\r\n    image: nextcloud\r\n    container_name: nextcloud\r\n    network_mode: \"bridge\"\r\n    ports:\r\n      - \"8093:80\"\r\n    environment:\r\n      - VIRTUAL_HOST=domain.tld,sub.domain.tld\r\n      - LETSENCRYPT_HOST=domain.tld,sub.domain.tld\r\n      - LETSENCRYPT_EMAIL=name@emailaddress.com\r\n    volumes:\r\n      - nextclouddata:/var/www/html\r\n    external_links:\r\n      - mysql:mysql\r\nvolumes:\r\n    nextclouddata:\r\n```\r\n\r\nI don't know what the problem is. I've forwarded the ports 80 and 443 to my server and it still doesn't work.\r\nsub.domain.tld isn't the real URL but I don't think I have to say that, have I? :D"},"comment":{"url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/comments/403940739","html_url":"https://github.com/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/283#issuecomment-403940739","issue_url":"https://api.github.com/repos/JrCs/docker-letsencrypt-nginx-proxy-companion/issues/283","id":403940739,"node_id":"MDEyOklzc3VlQ29tbWVudDQwMzk0MDczOQ==","user":{"login":"DanielFuchs98","id":28670365,"node_id":"MDQ6VXNlcjI4NjcwMzY1","avatar_url":"https://avatars0.githubusercontent.com/u/28670365?v=4","gravatar_id":"","url":"https://api.github.com/users/DanielFuchs98","html_url":"https://github.com/DanielFuchs98","followers_url":"https://api.github.com/users/DanielFuchs98/followers","following_url":"https://api.github.com/users/DanielFuchs98/following{/other_user}","gists_url":"https://api.github.com/users/DanielFuchs98/gists{/gist_id}","starred_url":"https://api.github.com/users/DanielFuchs98/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DanielFuchs98/subscriptions","organizations_url":"https://api.github.com/users/DanielFuchs98/orgs","repos_url":"https://api.github.com/users/DanielFuchs98/repos","events_url":"https://api.github.com/users/DanielFuchs98/events{/privacy}","received_events_url":"https://api.github.com/users/DanielFuchs98/received_events","type":"User","site_admin":false},"created_at":"2018-07-10T19:35:29Z","updated_at":"2018-07-10T19:35:29Z","author_association":"NONE","body":"I could enclose my problem: The Server-Error-Response from the Lets Encrypt Servers get an invalid Response from my reverse proxy. The Server try to get an Response from http://xxxx/.well-known/acme-challenge/xxxxxxxxxxxxxxxxxxxxxxxxx, which was an 403. \r\n\r\nDid I configure something false?"}}
{"actor":{"display_login":"DanielFuchs98"}}