komuw / ong

ong, is a Go http toolkit.
MIT License
16 stars 4 forks source link

Acme server clashes with redirect server on port 80 #284

Closed komuw closed 1 year ago

komuw commented 1 year ago

I think it is because letsencrypt does not issue wildcards using http-01 challenge https://github.com/komuw/ong/blob/a8fba42ce4255d58864cdcf4d1fa57b3995ca7c4/server/tls_conf.go#L185-L187

komuw commented 1 year ago

Actually, this seems to work on acme staging, but for some reason fails on acme prod.

komuw commented 1 year ago

Actually, this seems to work on acme staging, but for some reason fails on acme prod.

Actually, I think the issue is that we are starting two servers at port 80

So, the acme CA is only able to access the acme server once in a while. And the other time it gets access to the redirect server.