Skip to content

acme challenge request when issuing certificates via HTTP-01 is failing when proxy-protocol enabled in nginx

Issuing of certificates is failing with the following error:

Waiting for HTTP-01 challenge propagation: failed to perform self check GET request ''http://proxied-lb-testing.cern.ch/.well-known/acme-challenge/W3tQljroNNT-2fLzzb66o0ocT16LCIl7cavCt14O_9I``'': Get "http://proxied-lb-testing.cern.ch/.well-known/acme-challenge/W3tQljroNNT-2fLzzb66o0ocT16LCIl7cavCt14O_9I": EOF'``

There are a few issues upstream related to this (e.g. https://github.com/cert-manager/cert-manager/issues/3238) following their advice is not helpful.

The common work around is to disable proxy-protocol, issue the certificate and then reenable -- or switch to dns-01 challenge

Edited by Jack Charlie Munday