It is possible to manipulate caddy ssl certificates queue?

1. Caddy version (caddy version):

v2.4.6 h1:HGkGICFGvyrodcqOOclHKfvJC0qTU7vny/7FhYp9hNw=

2. How I run Caddy:

caddy run --environ --config /etc/caddy/sently.json

a. System environment:

Distributor ID: Ubuntu
Description: Ubuntu 20.04.2 LTS
Release: 20.04
Codename: focal

b. Command:

Paste command here.

c. Service/unit/compose file:

Paste full file contents here.
Make sure backticks stay on their own lines,
and the post looks nice in the preview pane.

d. My complete Caddyfile or JSON config:

Paste config here, replacing this text.
Use `caddy fmt` to make it readable.
DO NOT REDACT anything except credentials.
LEAVE DOMAIN NAMES INTACT.
Make sure the backticks stay on their own lines.
{
  "apps": {
    "http": {
      "servers": {
        "myserver": {
          "listen": [
            ":443"
          ],
          "logs": {},
          "routes": [
            {
              "handle": [
                {
                  "handler": "reverse_proxy",
                  "upstreams": [
                    {
                      "dial": "localhost:8001"
                    }
                  ]
                }
              ]
            }
          ]
        }
      }
    },
    "tls": {
      "automation": {
        "on_demand": {
          "ask": "http://localhost:8001/proxyCheck"
        },
        "policies": [
          {
            "issuers": [
              {
                "api_key": "...",
                "email": "",
                "module": "zerossl"
              }
            ],
            "on_demand": true
          }
        ]
      }
    }
  },
  "logging": {
    "logs": {
      "default": {
        "writer": {
          "filename": "/var/log/caddy/caddy.log",
          "output": "file"
        }
      }
    }
  }
}

3. The problem I’m having:

Because of this issue Questions about Renewing before TLS-ALPN-01 Revocations - Help - Let’s Encrypt Community Support we lost a lot of certificates. For a few days, we still got some certificates in the queue, and for some of our users, it is critical.

It is possible to manipulate caddy SSL certificates queue to order some priority or maybe generate certificates manually? Or maybe speed up it somehow

4. Error messages and/or full log output:

https://drive.google.com/file/d/1610XjhO_B-vNwT44BHNoevGsH4UnWKWr/view?usp=sharing

5. What I already tried:

6. Links to relevant resources:

Your logs are on Google drive which might be an issue - one has to login to google to see them?

This topic was automatically closed after 30 days. New replies are no longer allowed.