Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ACME_HOSTS on prod env "x509: certificate signed by unknown authority" #73

Open
BenWaNH opened this issue Nov 27, 2020 · 0 comments
Open

Comments

@BenWaNH
Copy link

BenWaNH commented Nov 27, 2020

Hi,

i'm trying to use Vulcain in my prod stack (no issue in dev with self signed certificate)
So, i'm Docker user and this is my service config in my docker-compose.yml file :

vulcain:
        image: dunglas/vulcain
        environment:
            - ACME_HOSTS=api.example.com
            - UPSTREAM=http://api
        depends_on:
            - api
        deploy:
            labels:
                - traefik.enable=true
                - traefik.tcp.routers.isc-api.rule=HostSNI(`api.example.com`)
                - traefik.tcp.routers.isc-api.entrypoints=websecure
                - traefik.tcp.routers.isc-api.tls=true
                - traefik.tcp.routers.isc-api.tls.passthrough=true
                - traefik.tcp.routers.isc-api.service=service-api-isc
                - traefik.tcp.services.service-api-isc.loadbalancer.server.port=443
        <<: *network

And below, content docker log for Vulcain service:

{"level":"info","ts":1606489658.6425629,"caller":"vulcain/server.go:147","msg":"vulcain started","protocol":"https","addr":""}
2020/11/27 15:09:10 http: TLS handshake error from 10.0.7.11:39992: Get "https://acme-v02.api.letsencrypt.org/directory": x509: certificate signed by unknown authority
2020/11/27 15:09:10 http: TLS handshake error from 10.0.7.11:39990: acme/autocert: missing certificate
2020/11/27 15:09:10 http: TLS handshake error from 10.0.7.11:39996: acme/autocert: missing certificate
2020/11/27 15:09:10 http: TLS handshake error from 10.0.7.11:39998: acme/autocert: missing certificate

For additional informations, i'm using Traefik and Docker Swarm but i don't think that is an impact to this issue

What's wrong with acme config?

Thanks
BenWa

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant