acme challenge request when issuing certificates via HTTP-01 is failing when proxy-protocol enabled in nginx
Issuing of certificates is failing with the following error:
Waiting for HTTP-01 challenge propagation: failed to perform self check GET request ''http://proxied-lb-testing.cern.ch/.well-known/acme-challenge/W3tQljroNNT-2fLzzb66o0ocT16LCIl7cavCt14O_9I``'': Get "http://proxied-lb-testing.cern.ch/.well-known/acme-challenge/W3tQljroNNT-2fLzzb66o0ocT16LCIl7cavCt14O_9I": EOF'``
There are a few issues upstream related to this (e.g. https://github.com/cert-manager/cert-manager/issues/3238) following their advice is not helpful.
The common work around is to disable proxy-protocol, issue the certificate and then reenable -- or switch to dns-01 challenge
Edited by Jack Charlie Munday