zos icon indicating copy to clipboard operation
zos copied to clipboard

Fqdn gateway with tls passthrough failed to start

Open mohamedamer453 opened this issue 2 years ago • 0 comments

After creating a fqdn gateway with the tls_passthrough option set to true and the backend is a vm running a caddy server, the deployment was successful but i was not able to access it from the domain with the following error.

This site can't provide a secure connection

and from caddy i got these errors.

2022/09/07 11:25:52.346  ERROR  tls.issuance.acme.acme_client  challenge failed  {"identifier": "http://fqdncaddy.gridtesting.xyz", "challenge_type": "http-01", "problem": {"type": "urn:ietf:params:acme:error:unauthorized", "title": "", "detail": "185.69.167.81: Invalid response from http://http://fqdncaddy.gridtesting.xyz/.well-known/acme-challenge/DXPVMC20AIcQsD43Gvg58SpyV4N8J7V0MReiT6Qw-L4: 404", "instance": "", "subproblems": []}}
2022/09/07 11:25:52.348  ERROR  tls.issuance.acme.acme_client  validating authorization  {"identifier": "http://fqdncaddy.gridtesting.xyz", "problem": {"type": "urn:ietf:params:acme:error:unauthorized", "title": "", "detail": "185.69.167.81: Invalid response from http://http://fqdncaddy.gridtesting.xyz/.well-known/acme-challenge/DXPVMC20AIcQsD43Gvg58SpyV4N8J7V0MReiT6Qw-L4: 404", "instance": "", "subproblems": []}, "order": "https://acme-v02.api.letsencrypt.org/acme/order/721377777/123320026447", "attempt": 1, "max_attempts": 3}
2022/09/07 11:25:53.669  INFO  tls.issuance.acme.acme_client  trying to solve challenge  {"identifier": "http://fqdncaddy.gridtesting.xyz", "challenge_type": "tls-alpn-01", "ca": "https://acme-v02.api.letsencrypt.org/directory"}
2022/09/07 11:26:04.515  ERROR  tls.issuance.acme.acme_client  challenge failed  {"identifier": "http://fqdncaddy.gridtesting.xyz", "challenge_type": "tls-alpn-01", "problem": {"type": "urn:ietf:params:acme:error:connection", "title": "", "detail": "185.69.167.81: Timeout during read (your server may be slow or overloaded)", "instance": "", "subproblems": []}}
2022/09/07 11:26:04.517  ERROR  tls.issuance.acme.acme_client  validating authorization  {"identifier": "http://fqdncaddy.gridtesting.xyz", "problem": {"type": "urn:ietf:params:acme:error:connection", "title": "", "detail": "185.69.167.81: Timeout during read (your server may be slow or overloaded)", "instance": "", "subproblems": []}, "order": "https://acme-v02.api.letsencrypt.org/acme/order/721377777/123320225777", "attempt": 2, "max_attempts": 3}
2022/09/07 11:26:04.517  ERROR  tls.obtain  could not get certificate from issuer  {"identifier": "http://fqdncaddy.gridtesting.xyz", "issuer": "acme-v02.api.letsencrypt.org-directory", "error": "HTTP 400 urn:ietf:params:acme:error:connection - 185.69.167.81: Timeout during read (your server may be slow or overloaded)"}

The VM & gateway were deployed on node 3 qanet and the created domain was pointing at the ip of the gateway

image

image

mohamedamer453 avatar Sep 07 '22 11:09 mohamedamer453