[Staging] 400 response during DNS challenge

Help
1

Hi,

We are using cert-manager in k8s to perform ACME DNS challenge flow with Let's encrypt staging (https://acme-staging-v02.api.letsencrypt.org/directory) and we have noticed a failure since last night with the following error:

cert-manager/controller/challenges/acceptChallenge "msg"="error accepting challenge" "error"="400 urn:ietf:params:acme:error:malformed: Unable to update challenge :: authorization must be pending"

The ACME challenge is successful when switching to the productive server (https://acme-v02.api.letsencrypt.org/directory).

We have seen similar issue a few months ago, and the time there was a staging issue. (see [Staging] Record exists but query timing out looking up TXT record)

Is there any known issue with the staging Let's encrypt server at the moment?

Thanks,
Alex

My domain is:
multiple domain names

I ran this command:
n/a (using cert-manager)

It produced this output:
cert-manager/controller/challenges/acceptChallenge "msg"="error accepting challenge" "error"="400 urn:ietf:params:acme:error:malformed: Unable to update challenge :: authorization must be pending"

My web server is (include version):
https://acme-staging-v02.api.letsencrypt.org/directory

2

@lestaff staging failures seem to be occurring everywhere right now #5

7 Likes
3

Is there a status page for staging? Was baffled as to why our tests started randomly failing until I saw this post.

4

It's the same status page, but we generally don't wake SREs for staging. We are starting investigations now (it seems something's gone wrong with auto-scaling...)

6 Likes
5

But can't the status page at least reflect this? It currently says staging is fully operational.

6 Likes
6

Yes, I just finished putting an incident up: https://letsencrypt.status.io/

8 Likes
7

I think I fixed it! Please let me know if problems are persisting.

7 Likes
8

Hire an European SRE! :smiley: Or perhaps even better, an Aussie?

5 Likes
9

I think it finally works now. Thank you very much!!!

6 Likes
10

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.