zos
zos copied to clipboard
Fqdn gateway with tls passthrough failed to start
After creating a fqdn gateway with the tls_passthrough
option set to true
and the backend is a vm running a caddy server, the deployment was successful but i was not able to access it from the domain with the following error.
This site can't provide a secure connection
and from caddy i got these errors.
2022/09/07 11:25:52.346 ERROR tls.issuance.acme.acme_client challenge failed {"identifier": "http://fqdncaddy.gridtesting.xyz", "challenge_type": "http-01", "problem": {"type": "urn:ietf:params:acme:error:unauthorized", "title": "", "detail": "185.69.167.81: Invalid response from http://http://fqdncaddy.gridtesting.xyz/.well-known/acme-challenge/DXPVMC20AIcQsD43Gvg58SpyV4N8J7V0MReiT6Qw-L4: 404", "instance": "", "subproblems": []}}
2022/09/07 11:25:52.348 ERROR tls.issuance.acme.acme_client validating authorization {"identifier": "http://fqdncaddy.gridtesting.xyz", "problem": {"type": "urn:ietf:params:acme:error:unauthorized", "title": "", "detail": "185.69.167.81: Invalid response from http://http://fqdncaddy.gridtesting.xyz/.well-known/acme-challenge/DXPVMC20AIcQsD43Gvg58SpyV4N8J7V0MReiT6Qw-L4: 404", "instance": "", "subproblems": []}, "order": "https://acme-v02.api.letsencrypt.org/acme/order/721377777/123320026447", "attempt": 1, "max_attempts": 3}
2022/09/07 11:25:53.669 INFO tls.issuance.acme.acme_client trying to solve challenge {"identifier": "http://fqdncaddy.gridtesting.xyz", "challenge_type": "tls-alpn-01", "ca": "https://acme-v02.api.letsencrypt.org/directory"}
2022/09/07 11:26:04.515 ERROR tls.issuance.acme.acme_client challenge failed {"identifier": "http://fqdncaddy.gridtesting.xyz", "challenge_type": "tls-alpn-01", "problem": {"type": "urn:ietf:params:acme:error:connection", "title": "", "detail": "185.69.167.81: Timeout during read (your server may be slow or overloaded)", "instance": "", "subproblems": []}}
2022/09/07 11:26:04.517 ERROR tls.issuance.acme.acme_client validating authorization {"identifier": "http://fqdncaddy.gridtesting.xyz", "problem": {"type": "urn:ietf:params:acme:error:connection", "title": "", "detail": "185.69.167.81: Timeout during read (your server may be slow or overloaded)", "instance": "", "subproblems": []}, "order": "https://acme-v02.api.letsencrypt.org/acme/order/721377777/123320225777", "attempt": 2, "max_attempts": 3}
2022/09/07 11:26:04.517 ERROR tls.obtain could not get certificate from issuer {"identifier": "http://fqdncaddy.gridtesting.xyz", "issuer": "acme-v02.api.letsencrypt.org-directory", "error": "HTTP 400 urn:ietf:params:acme:error:connection - 185.69.167.81: Timeout during read (your server may be slow or overloaded)"}
The VM & gateway were deployed on node 3 qanet
and the created domain was pointing at the ip of the gateway