futurice / alley-oop

Dynamic DNS server with an integrated Let's Encrypt proxy, enabling easy HTTPS and WSS for web servers on a local network (LAN)
Other
38 stars 5 forks source link

Error in ALPN protocol (with Cloudflare?) #9

Open Minipada opened 3 years ago

Minipada commented 3 years ago

Hi, thanks for the project and the education video :wink: . I'm trying to set it up with Cloudflare but I keep getting this message (I replaced my domain by example.com):

WaitAuthorization error: acme: authorization error for alley-oop.example.com: 403 urn:ietf:params:acme:error:unauthorized: Cannot negotiate ALPN protocol "acme-tls/1" for tls-alpn-01 challenge

I use the DNS only option, non proxied by Cloudflare, which should let the server handle the negociation. In /var/lib/alley-oop, I have 4 files:

CERT-acme_account+key CERT-alley-oop.example.com+rsa CERT-alley-oop.example.com IPS-172-17-0-4.lan.example.com

I am not sure on how to debug this. I don't know if it's a cloudflare specific issue or how I could trace it. Any hint would be welcome. Thank you!

Minipada commented 3 years ago

Update: I reserved a new domain name on route53, which doesn't go through Cloudflare, created a self signed key for the domain following the link example but still get the same error.