tnozicka / openshift-acme

ACME Controller for OpenShift and Kubernetes Cluster. (Supports e.g. Let's Encrypt)
Apache License 2.0
319 stars 116 forks source link

failed to get ACME authorization: 404 urn:acme:error:malformed: Expired authorization #96

Closed miksonx closed 5 years ago

miksonx commented 5 years ago

Error

Failed to get ACME authorization: 404 urn:acme:error:malformed: Expired authorization

What happened: Everything was working normal. Today certificates are not reissued

What you expected to happen: Reissue certificate

Environment: OKD 3.11

Image build build-date=2019-03-06T02:42:38.249442 com.redhat.build-host=cpt-0004.osbs.prod.upshift.rdu2.redhat.com io.openshift.build.commit.id=c7dfdab5feadc568a66261a8645dfc97a397893b

tnozicka commented 5 years ago

can you post the acme controller logs?

miksonx commented 5 years ago

Hi @tnozicka
Sorry for posting this as bug but is not. There was expired authorization because the ingress nodes ware restricted to verify public domain of issued challenge by the ACME service. We enabled proper route and the service was able to continue verifying issued .well-known/acme-challenge/ Closing this.