Using the simp_le client in a docker container hangs during http challenge


#1

Please fill out the fields below so we can help you better.

My domain is:
spierepf.ddns.net

I ran this command:
simp_le --verbose --email xxx@yyy.zzz -f account_key.json -f fullchain.pem -f key.pem -d spierepf.ddns.net:/usr/share/nginx/html

It produced this output:
2017-05-09 11:02:57,239:DEBUG:simp_le:1371: [’–verbose’, ‘–email’, ‘spierepf@hotmail.com’, ‘-f’, ‘account_key.json’, ‘-f’, ‘fullchain.pem’, ‘-f’, ‘key.pem’, ‘-d’, ‘spierepf.ddns.net:/usr/share/nginx/html’] parsed as Namespace(account_key_public_exponent=65537, account_key_size=4096, cert_key_size=4096, default_root=None, email=‘spierepf@hotmail.com’, help=False, integration_test=False, ioplugins=[‘account_key.json’, ‘fullchain.pem’, ‘key.pem’], reuse_key=False, revoke=False, server=‘https://acme-v01.api.letsencrypt.org/directory’, test=False, tos_sha256=‘6373439b9f29d67a5cd4d18cbc7f264809342dbf21cb2ba2fc7588df987a6221’, user_agent=‘simp_le/0’, valid_min=2592000, verbose=True, version=False, vhosts=[Vhost(name=‘spierepf.ddns.net’, root=’/usr/share/nginx/html’)])
2017-05-09 11:02:57,240:DEBUG:simp_le:367: Loading account_key.json
2017-05-09 11:02:57,241:DEBUG:simp_le:367: Loading fullchain.pem
2017-05-09 11:02:57,241:DEBUG:simp_le:367: Loading key.pem
2017-05-09 11:02:57,241:DEBUG:simp_le:1280: Computed roots: {‘spierepf.ddns.net’: ‘/usr/share/nginx/html’}
2017-05-09 11:02:57,241:INFO:simp_le:1211: Generating new account key
2017-05-09 11:02:58,092:DEBUG:root:626: Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2017-05-09 11:02:58,093:DEBUG:requests.packages.urllib3.connectionpool:818: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2017-05-09 11:02:58,463:DEBUG:requests.packages.urllib3.connectionpool:395: https://acme-v01.api.letsencrypt.org:443 “GET /directory HTTP/1.1” 200 352
2017-05-09 11:02:58,463:DEBUG:acme.client:641: Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 352
Boulder-Request-Id: 5Gt0mK2cujd1E2NzzAzLcLdKJHy61c5ALjnR-5CqZ14
Replay-Nonce: kvQL2iK2qX3fANQqzb8Z2GeVZ1JPCnB4r81IRmBq4Ws
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Tue, 09 May 2017 11:02:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 09 May 2017 11:02:58 GMT
Connection: keep-alive

{
“key-change”: “https://acme-v01.api.letsencrypt.org/acme/key-change”,
“new-authz”: “https://acme-v01.api.letsencrypt.org/acme/new-authz”,
“new-cert”: “https://acme-v01.api.letsencrypt.org/acme/new-cert”,
“new-reg”: “https://acme-v01.api.letsencrypt.org/acme/new-reg”,
“revoke-cert”: “https://acme-v01.api.letsencrypt.org/acme/revoke-cert
}
2017-05-09 11:02:58,464:DEBUG:root:673: Requesting fresh nonce
2017-05-09 11:02:58,464:DEBUG:root:626: Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-reg.
2017-05-09 11:02:58,575:DEBUG:requests.packages.urllib3.connectionpool:395: https://acme-v01.api.letsencrypt.org:443 “HEAD /acme/new-reg HTTP/1.1” 405 0
2017-05-09 11:02:58,576:DEBUG:acme.client:641: Received response:
HTTP 405
Server: nginx
Content-Type: application/problem+json
Content-Length: 91
Allow: POST
Boulder-Request-Id: sQruqSb4Xolet7A6PdNylnohcS7FUjPVc9-yD_XKo1A
Replay-Nonce: osB4PUfnI8Bh4fNUZy34vyEFWxuVvzm4evCLDVvHoQo
Expires: Tue, 09 May 2017 11:02:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 09 May 2017 11:02:58 GMT
Connection: keep-alive

2017-05-09 11:02:58,576:DEBUG:acme.client:666: Storing nonce: osB4PUfnI8Bh4fNUZy34vyEFWxuVvzm4evCLDVvHoQo
2017-05-09 11:02:58,577:DEBUG:acme.client:547: JWS payload:
{
“contact”: [
"mailto:spierepf@hotmail.com"
],
“resource”: “new-reg”
}
2017-05-09 11:02:58,595:DEBUG:root:624: Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-reg:
{
“header”: {
“alg”: “RS256”,
“jwk”: {
“e”: “AQAB”,
“kty”: “RSA”,
“n”: “wfH95WbCxJgy1NC1wMR2A_AqCYmHftHbh3xKLlgCaa3hVUZLfOEQ09GRr8OLNRsaWi6d-wmfI8cb89POKhX_gKLtfarrsdch_eyptWMc5v2HXxb5tGe48zShyRq4f9v4xJD0pIInoBFZZGIAPcHM6e1KTTS4AUEX7mv_zej_p5Dz6crWdYToM7RpxgmkrHGdNJd4wzNo_1nUVj911zETGfuBADEbRizf_CDIznDVLupWYLCL9-aSjVq9fcNQo_zfyUdZCwHxVJh3v0DrC0eDTQfFnREZ-jeyC1o7Bb1uylF4ZercrHsbogOyK5cwIXShymBb0-tySwoHtk66Wk56bFcRQr9sHAvJwZTu10o6hEgtnOEh7209v1u1KDPoDYPscSS2E4iRwwq8OgUj_EyTyO4EGFKo2ghOyDCxtpJGFzoKWOe1qxY17348oMAepDJ6wbDprM2ubGcd4dwer5NcCQor6fMLgZQKtMgjjx_OU6nk1cRAVlPQzB-ZI0pAOrOYtMVNG_h-meuJGqCq0HFP-nEoM-ngn9Drkcli_T9IabmLlKrHE4c3sTOcXfnSNwetrDKYKBONobqPPD_ssQ1bUhtJcj3ojVkDQ8MkZIoK1VZglLOeYx1YLWh3IJEZJ63GFwGBWBorlSsbzrRaaGRt7zlCswJJwuL-3dzxRx-qXM"
}
},
“protected”: “eyJub25jZSI6ICJvc0I0UFVmbkk4Qmg0Zk5VWnkzNHZ5RUZXeHVWdnptNGV2Q0xEVnZIb1FvIn0”,
“payload”: “ewogICJjb250YWN0IjogWwogICAgIm1haWx0bzpzcGllcmVwZkBob3RtYWlsLmNvbSIKICBdLCAKICAicmVzb3VyY2UiOiAibmV3LXJlZyIKfQ”,
“signature”: "UTyQBEbmZs0TDHyl
-jQvUmV7M_Iv6IWGZ0zmJwNJDIMbOdIZSrmTkpmwz9n47wnU1JNMGjEx4sLdTxG2gsL7SaJC8ZqrYZy2raz8lfuDz352-4zpvPBnyzujoAqllGdH20vNzKSIiXN-v9rwmjtU9tIlxE6645sCkvKPtG9C1O-ZslaPcWUnAoZ7-CIEq7DjUbV9WkmXk4kBNbusmx8xnLlg7bRbVGif0SZ-G7EOZFHR-Tcdahq89DZw51-C47bqpzlJRD-MvqW_12AEaydsBzaTENRY0gHWMjgogvp9wzsuL4YwbkkYT07NHi4MY1mj2BjwOIpUxPELY7WPE1AqrGtWKx_2wNnySWyOR2Jpr3QnWyHE6P3ZPkOvfg27F5HfRdDGuOUkEBmJAl6dRYFTtwy8e-uMz3MmEr-Ch-qJxbclikxauL3fZTBI7bXUbgEqS0-t8EfAn46cy1tgb39fCFyAXhn7J1yCKMUeLwx-m0caSkmdiiDojU0vXdrII1XIaJrLvSUNV4NYXH4coerdvdBLDHFEVj-2hC8YcV90wRT3T6dIpYQ3VSnzrphkRo77yypEUsE1JEuRxBuowGUkiCRSWcP4aTKXs5aublN_wQNRsAScI_RnUKxN20bjCIOWZzzCW7l3vGw4-9Fk5Ng3NQ5I5ZRtPE4zPajcfMDzoQ”
}
2017-05-09 11:02:58,893:DEBUG:requests.packages.urllib3.connectionpool:395: https://acme-v01.api.letsencrypt.org:443 “POST /acme/new-reg HTTP/1.1” 201 921
2017-05-09 11:02:58,895:DEBUG:acme.client:641: Received response:
HTTP 201
Server: nginx
Content-Type: application/json
Content-Length: 921
Boulder-Request-Id: 1tCRAWU3T4i85DTcDgSp-2vUFEwkpz95en4TCqBxWaI
Boulder-Requester: 14246951
Link: https://acme-v01.api.letsencrypt.org/acme/new-authz;rel=“next”, https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf;rel="terms-of-service"
Location: https://acme-v01.api.letsencrypt.org/acme/reg/14246951
Replay-Nonce: gEhkKCXqB9rp5etAXqWJYNpaphZYM_MCd9SLJTeEK0U
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Tue, 09 May 2017 11:02:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 09 May 2017 11:02:58 GMT
Connection: keep-alive

{
“id”: 14246951,
“key”: {
“kty”: “RSA”,
“n”: “wfH95WbCxJgy1NC1wMR2A_AqCYmHftHbh3xKLlgCaa3hVUZLfOEQ09GRr8OLNRsaWi6d-wmfI8cb89POKhX_gKLtfarrsdch_eyptWMc5v2HXxb5tGe48zShyRq4f9v4xJD0pIInoBFZZGIAPcHM6e1KTTS4AUEX7mv_zej_p5Dz6crWdYToM7RpxgmkrHGdNJd4wzNo_1nUVj911zETGfuBADEbRizf_CDIznDVLupWYLCL9-aSjVq9fcNQo_zfyUdZCwHxVJh3v0DrC0eDTQfFnREZ-jeyC1o7Bb1uylF4ZercrHsbogOyK5cwIXShymBb0-tySwoHtk66Wk56bFcRQr9sHAvJwZTu10o6hEgtnOEh7209v1u1KDPoDYPscSS2E4iRwwq8OgUj_EyTyO4EGFKo2ghOyDCxtpJGFzoKWOe1qxY17348oMAepDJ6wbDprM2ubGcd4dwer5NcCQor6fMLgZQKtMgjjx_OU6nk1cRAVlPQzB-_ZI0pAOrOYtMVNG_h-meuJGqCq0HFP-nEoM-ngn9Drkcli_T9IabmLlKrHE4c3sTOcXfnSNwetrDKYKBONobqPPD_ssQ1bUhtJcj3ojVkDQ8MkZIoK1VZglLOeYx1YLWh3IJEZJ63GFwGBWBorlSsbzrRaaGRt7zlCswJJwuL-3dzxRx-qXM”,
“e”: “AQAB”
},
“contact”: [
"mailto:spierepf@hotmail.com"
],
“initialIp”: “24.138.24.95”,
“createdAt”: “2017-05-09T11:02:58.795671648Z”,
“Status”: “valid”
}
2017-05-09 11:02:58,895:DEBUG:acme.client:666: Storing nonce: gEhkKCXqB9rp5etAXqWJYNpaphZYM_MCd9SLJTeEK0U
2017-05-09 11:02:58,900:DEBUG:requests.packages.urllib3.connectionpool:818: Starting new HTTPS connection (1): letsencrypt.org
2017-05-09 11:02:59,121:DEBUG:requests.packages.urllib3.connectionpool:395: https://letsencrypt.org:443 “GET /documents/LE-SA-v1.1.1-August-1-2016.pdf HTTP/1.1” 200 134243
2017-05-09 11:02:59,431:DEBUG:simp_le:1237: TOS hash: 6373439b9f29d67a5cd4d18cbc7f264809342dbf21cb2ba2fc7588df987a6221
2017-05-09 11:02:59,431:DEBUG:acme.client:547: JWS payload:
{
“contact”: [
"mailto:spierepf@hotmail.com"
],
“resource”: “reg”,
“agreement”: “https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf”,
“key”: {
“e”: “AQAB”,
“kty”: “RSA”,
“n”: “wfH95WbCxJgy1NC1wMR2A_AqCYmHftHbh3xKLlgCaa3hVUZLfOEQ09GRr8OLNRsaWi6d-wmfI8cb89POKhX_gKLtfarrsdch_eyptWMc5v2HXxb5tGe48zShyRq4f9v4xJD0pIInoBFZZGIAPcHM6e1KTTS4AUEX7mv_zej_p5Dz6crWdYToM7RpxgmkrHGdNJd4wzNo_1nUVj911zETGfuBADEbRizf_CDIznDVLupWYLCL9-aSjVq9fcNQo_zfyUdZCwHxVJh3v0DrC0eDTQfFnREZ-jeyC1o7Bb1uylF4ZercrHsbogOyK5cwIXShymBb0-tySwoHtk66Wk56bFcRQr9sHAvJwZTu10o6hEgtnOEh7209v1u1KDPoDYPscSS2E4iRwwq8OgUj_EyTyO4EGFKo2ghOyDCxtpJGFzoKWOe1qxY17348oMAepDJ6wbDprM2ubGcd4dwer5NcCQor6fMLgZQKtMgjjx_OU6nk1cRAVlPQzB-_ZI0pAOrOYtMVNG_h-meuJGqCq0HFP-nEoM-ngn9Drkcli_T9IabmLlKrHE4c3sTOcXfnSNwetrDKYKBONobqPPD_ssQ1bUhtJcj3ojVkDQ8MkZIoK1VZglLOeYx1YLWh3IJEZJ63GFwGBWBorlSsbzrRaaGRt7zlCswJJwuL-3dzxRx-qXM”
}
}
2017-05-09 11:02:59,444:DEBUG:root:624: Sending POST request to https://acme-v01.api.letsencrypt.org/acme/reg/14246951:
{
“header”: {
“alg”: “RS256”,
“jwk”: {
“e”: “AQAB”,
“kty”: “RSA”,
“n”: “wfH95WbCxJgy1NC1wMR2A_AqCYmHftHbh3xKLlgCaa3hVUZLfOEQ09GRr8OLNRsaWi6d-wmfI8cb89POKhX_gKLtfarrsdch_eyptWMc5v2HXxb5tGe48zShyRq4f9v4xJD0pIInoBFZZGIAPcHM6e1KTTS4AUEX7mv_zej_p5Dz6crWdYToM7RpxgmkrHGdNJd4wzNo_1nUVj911zETGfuBADEbRizf_CDIznDVLupWYLCL9-aSjVq9fcNQo_zfyUdZCwHxVJh3v0DrC0eDTQfFnREZ-jeyC1o7Bb1uylF4ZercrHsbogOyK5cwIXShymBb0-tySwoHtk66Wk56bFcRQr9sHAvJwZTu10o6hEgtnOEh7209v1u1KDPoDYPscSS2E4iRwwq8OgUj_EyTyO4EGFKo2ghOyDCxtpJGFzoKWOe1qxY17348oMAepDJ6wbDprM2ubGcd4dwer5NcCQor6fMLgZQKtMgjjx_OU6nk1cRAVlPQzB-_ZI0pAOrOYtMVNG_h-meuJGqCq0HFP-nEoM-ngn9Drkcli_T9IabmLlKrHE4c3sTOcXfnSNwetrDKYKBONobqPPD_ssQ1bUhtJcj3ojVkDQ8MkZIoK1VZglLOeYx1YLWh3IJEZJ63GFwGBWBorlSsbzrRaaGRt7zlCswJJwuL-3dzxRx-qXM”
}
},
“protected”: “eyJub25jZSI6ICJnRWhrS0NYcUI5cnA1ZXRBWHFXSllOcGFwaFpZTV9NQ2Q5U0xKVGVFSzBVIn0”,
“payload”: “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”,
“signature”: “NQdegiSVsxn4h_wjcO9LkjaRCj63LJGNXNmbUh40X5c1k28BlETDGUTCxMJUhlYEneIkhMU3kwk8YnoLLTbsI1fVWKHAgbx8uUI_WKemFg7TEnkkAYxz5MaKt47N-TA-RjY0zpBH8wvPEFdW5wTVhqmoxw1JhjUaAhard4wiWmWJhah7H5ixFj4_rSY7qn8ruU3i6d9Gby5EcQuo0mogxvI1IWJ_Ip8EEw48uNwM0Jp79DVumKrUC5jN7_dh5KY-WhpBYLpJ4wBao9BRtVja079D-Xhzv_HKoxWjS_KI4XQSyM65yFMC03ONMceFj8M8tSvQdrFy_JikgjxFj8TgX1HOdGlkwl9cfWW2AbuZ911qCG_2QReJIpTZ4JOUsHrNXw6PCQGds6HlQC-URXUTdkowzXZk_nrOHuBUcccy6XrmnMbhcRNgWjnydYWKvlN72A2VhpoV4gOulKm-aXJJDF6S8QJ0KFWYNjkgQ9nFQS0be1-cTkF9lfKR57WzYTnkvXlpZm0jI5xzwhMP926J7eggCcGk_nZcH65McSbAo0E3Z5vUnwvzllzM6oiroehM1HxYGehxHcl0DIRbfmAnxJ4-CpArQNCzaGqNO_s4wddkhcD8qUKfaU_xgHYNlBqMCcRi1Uu2OQ8Ny-l4ljhIvKTF7HMW5mrJXrqBtZF0o4E”
}
2017-05-09 11:02:59,590:DEBUG:requests.packages.urllib3.connectionpool:395: https://acme-v01.api.letsencrypt.org:443 “POST /acme/reg/14246951 HTTP/1.1” 202 994
2017-05-09 11:02:59,590:DEBUG:acme.client:641: Received response:
HTTP 202
Server: nginx
Content-Type: application/json
Content-Length: 994
Boulder-Request-Id: SoFiO2rh5K_0cHWvAU9id7N2nIk5Ic6LrsdeUUVrmvw
Boulder-Requester: 14246951
Link: https://acme-v01.api.letsencrypt.org/acme/new-authz;rel=“next”, https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf;rel="terms-of-service"
Replay-Nonce: INmxqMPEdZA5qo1KJ_D7_IkQp0lK_6X4A6_mAmsuNvs
Expires: Tue, 09 May 2017 11:02:59 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 09 May 2017 11:02:59 GMT
Connection: keep-alive

{
“id”: 14246951,
“key”: {
“kty”: “RSA”,
“n”: “wfH95WbCxJgy1NC1wMR2A_AqCYmHftHbh3xKLlgCaa3hVUZLfOEQ09GRr8OLNRsaWi6d-wmfI8cb89POKhX_gKLtfarrsdch_eyptWMc5v2HXxb5tGe48zShyRq4f9v4xJD0pIInoBFZZGIAPcHM6e1KTTS4AUEX7mv_zej_p5Dz6crWdYToM7RpxgmkrHGdNJd4wzNo_1nUVj911zETGfuBADEbRizf_CDIznDVLupWYLCL9-aSjVq9fcNQo_zfyUdZCwHxVJh3v0DrC0eDTQfFnREZ-jeyC1o7Bb1uylF4ZercrHsbogOyK5cwIXShymBb0-tySwoHtk66Wk56bFcRQr9sHAvJwZTu10o6hEgtnOEh7209v1u1KDPoDYPscSS2E4iRwwq8OgUj_EyTyO4EGFKo2ghOyDCxtpJGFzoKWOe1qxY17348oMAepDJ6wbDprM2ubGcd4dwer5NcCQor6fMLgZQKtMgjjx_OU6nk1cRAVlPQzB-_ZI0pAOrOYtMVNG_h-meuJGqCq0HFP-nEoM-ngn9Drkcli_T9IabmLlKrHE4c3sTOcXfnSNwetrDKYKBONobqPPD_ssQ1bUhtJcj3ojVkDQ8MkZIoK1VZglLOeYx1YLWh3IJEZJ63GFwGBWBorlSsbzrRaaGRt7zlCswJJwuL-3dzxRx-qXM”,
“e”: “AQAB”
},
“contact”: [
"mailto:spierepf@hotmail.com"
],
“agreement”: “https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf”,
“initialIp”: “24.138.24.95”,
“createdAt”: “2017-05-09T11:02:58Z”,
“Status”: “valid”
}
2017-05-09 11:02:59,590:DEBUG:acme.client:666: Storing nonce: INmxqMPEdZA5qo1KJ_D7_IkQp0lK_6X4A6_mAmsuNvs
2017-05-09 11:02:59,591:DEBUG:acme.client:547: JWS payload:
{
“identifier”: {
“type”: “dns”,
“value”: “spierepf.ddns.net
},
“resource”: “new-authz”
}
2017-05-09 11:02:59,604:DEBUG:root:624: Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz:
{
“header”: {
“alg”: “RS256”,
“jwk”: {
“e”: “AQAB”,
“kty”: “RSA”,
“n”: “wfH95WbCxJgy1NC1wMR2A_AqCYmHftHbh3xKLlgCaa3hVUZLfOEQ09GRr8OLNRsaWi6d-wmfI8cb89POKhX_gKLtfarrsdch_eyptWMc5v2HXxb5tGe48zShyRq4f9v4xJD0pIInoBFZZGIAPcHM6e1KTTS4AUEX7mv_zej_p5Dz6crWdYToM7RpxgmkrHGdNJd4wzNo_1nUVj911zETGfuBADEbRizf_CDIznDVLupWYLCL9-aSjVq9fcNQo_zfyUdZCwHxVJh3v0DrC0eDTQfFnREZ-jeyC1o7Bb1uylF4ZercrHsbogOyK5cwIXShymBb0-tySwoHtk66Wk56bFcRQr9sHAvJwZTu10o6hEgtnOEh7209v1u1KDPoDYPscSS2E4iRwwq8OgUj_EyTyO4EGFKo2ghOyDCxtpJGFzoKWOe1qxY17348oMAepDJ6wbDprM2ubGcd4dwer5NcCQor6fMLgZQKtMgjjx_OU6nk1cRAVlPQzB-_ZI0pAOrOYtMVNG_h-meuJGqCq0HFP-nEoM-ngn9Drkcli_T9IabmLlKrHE4c3sTOcXfnSNwetrDKYKBONobqPPD_ssQ1bUhtJcj3ojVkDQ8MkZIoK1VZglLOeYx1YLWh3IJEZJ63GFwGBWBorlSsbzrRaaGRt7zlCswJJwuL-3dzxRx-qXM”
}
},
“protected”: “eyJub25jZSI6ICJJTm14cU1QRWRaQTVxbzFLSl9EN19Ja1FwMGxLXzZYNEE2X21BbXN1TnZzIn0”,
“payload”: “ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwgCiAgICAidmFsdWUiOiAic3BpZXJlcGYuZGRucy5uZXQiCiAgfSwgCiAgInJlc291cmNlIjogIm5ldy1hdXRoeiIKfQ”,
“signature”: “vgdu3c0O-JMkpP7z32s6snZKGB8Mk6jz94ipQt06Qe6CywvInxUbVpQzSLI67aT2txq5_lVDYEaY_66AnsrhCLpAZVH4NPUOdgWy85o4GS2B2h5I9W3oErYCuHIZn4N8iNjrxQU5sCLIwz_ipYQ35NND1r9eWllxjiyVOTeA1vCvGjoTz3YmzcG3TuYoOLg1ax1miYDYpr91SYPcSzmXdltgUMQxq9C9UE1ZYj2dwM8i5yrIgtySWN1RC8CAjD4E1IkUa3a233TXpb9NJxbkVB7xw60l8bJQsAs2iewH1RKueng2tBTBRfW6EengGw4iTHTjn45vcgQ8LrG2Y8feHj-3UEB7TaGXJyosD4Rju61UMpg2_6GZ0EVo7Ye3OPY0691-9lRlNMfwSvmpMFNVJG7zV2Mf35m6kYKU1P97D0kZnnfpHQE2G9IxFMhiB568Nx0Zm_MmSp24Nj3gFyM4ZXWnoJ2zEPtIXJKB44-BYIrCZZoXIMff5yXiSQCip75TVnKmapBLG-eLI982LT9JQrl__zYkMQprU09tUp-XRuZ6_RBZRo8nBioA_NDBLNGxOcEx-9mfMFfad2eiun6fI1cbnMvm6h-ijejghPP0p6AXeD0nS2QKikG-CvYPgkhIp-ialqFQUIo8QLudVFry-yBGWwZ3ASeZsIpGI2KmyxQ”
}
2017-05-09 11:02:59,759:DEBUG:requests.packages.urllib3.connectionpool:395: https://acme-v01.api.letsencrypt.org:443 “POST /acme/new-authz HTTP/1.1” 201 1005
2017-05-09 11:02:59,761:DEBUG:acme.client:641: Received response:
HTTP 201
Server: nginx
Content-Type: application/json
Content-Length: 1005
Boulder-Request-Id: bd8fjnaFIvtKDJktInIK2GjxTU1FhZXJlQjNvR_8oys
Boulder-Requester: 14246951
Link: https://acme-v01.api.letsencrypt.org/acme/new-cert;rel="next"
Location: https://acme-v01.api.letsencrypt.org/acme/authz/-W53XG9N-PcoaR9gPZ9q4TH44ZM09jZBCReJarr4Chk
Replay-Nonce: l32017LQENMLtMdf6v0ioS2giErAS0Os-kwJH9TWDgo
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Tue, 09 May 2017 11:02:59 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 09 May 2017 11:02:59 GMT
Connection: keep-alive

{
“identifier”: {
“type”: “dns”,
“value”: “spierepf.ddns.net
},
“status”: “pending”,
“expires”: “2017-05-16T11:02:59.656179074Z”,
“challenges”: [
{
“type”: “http-01”,
“status”: “pending”,
“uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/-W53XG9N-PcoaR9gPZ9q4TH44ZM09jZBCReJarr4Chk/1147834376”,
“token”: “kf4rYPPgBT-ubAsVA1ZhVGqPUOSZMGFyzDytWmAd2tg”
},
{
“type”: “tls-sni-01”,
“status”: “pending”,
“uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/-W53XG9N-PcoaR9gPZ9q4TH44ZM09jZBCReJarr4Chk/1147834377”,
“token”: “5KYEb5AK0D9dx34UySKr7dcA6rnVaTBa6A9bj4tgZto”
},
{
“type”: “dns-01”,
“status”: “pending”,
“uri”: “https://acme-v01.api.letsencrypt.org/acme/challenge/-W53XG9N-PcoaR9gPZ9q4TH44ZM09jZBCReJarr4Chk/1147834378”,
“token”: “nU8dsB75TqTrHlZrqaALaGLSKVjvBdMZg_ML5jEUiPk”
}
],
“combinations”: [
[
2
],
[
0
],
[
1
]
]
}
2017-05-09 11:02:59,761:DEBUG:acme.client:666: Storing nonce: l32017LQENMLtMdf6v0ioS2giErAS0Os-kwJH9TWDgo
2017-05-09 11:02:59,773:DEBUG:simp_le:983: Saving validation (u’kf4rYPPgBT-ubAsVA1ZhVGqPUOSZMGFyzDytWmAd2tg.63543MRgFiPVD1DrDWJwI6bU8T-0U7DruBu_VUZaRIM’) at /usr/share/nginx/html/.well-known/acme-challenge/kf4rYPPgBT-ubAsVA1ZhVGqPUOSZMGFyzDytWmAd2tg
2017-05-09 11:02:59,775:DEBUG:acme.challenges:307: Verifying http-01 at http://spierepf.ddns.net/.well-known/acme-challenge/kf4rYPPgBT-ubAsVA1ZhVGqPUOSZMGFyzDytWmAd2tg
2017-05-09 11:02:59,776:DEBUG:requests.packages.urllib3.connectionpool:207: Starting new HTTP connection (1): spierepf.ddns.net
nginx_1 | 24.138.24.95 - - [09/May/2017:11:02:59 +0000] “GET /.well-known/acme-challenge/kf4rYPPgBT-ubAsVA1ZhVGqPUOSZMGFyzDytWmAd2tg HTTP/1.1” 200 87 “-” “python-requests/2.13.0” “-”

My operating system is (include version):
I’m using the official nginx image on docker hub. The Dockerfile is:

So it looks like debian stretch-slim

My web server is (include version):
1.13.0-1~stretch (see above)

My hosting provider, if applicable, is:
Eastlink

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no

If you look closely at the last line of the output, you’ll notice the nginx log message where the webserver responds to the challenge. This suggests to me that that specific challenge was successful. For some reason however, the simp_le client hangs at that point. I’ve left it running for more than six hours with no resolution. I would think that the client would terminate with failure after some point.


#2

Hi @spierepf,

Reading this it strikes me as a problem likely to only be solvable by the authors of simp_le. Have you opened an issue with the upstream project?


#3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.