Zero ssl certificate creation breaking

1. The problem I’m having:

Certificates created via zero ssl certificate authority randomly started breaking in production

2. Error messages and/or full log output:

{
  "level": "error",
  "ts": 1762954332.3798602,
  "logger": "tls.obtain",
  "msg": "will retry",
  "error": "[redacted] Obtain: creating certificate: POST https://api.zerossl.com/certificates?access_key=redacted: HTTP 200: <missing error info> (raw={\"id\":\"redacted\",\"type\":\"1\",\"common_name\":\"redacted\",\"additional_domains\":\"\",\"created\":\"2025-11-12 13:32:11\",\"expires\":\"2026-02-10 23:59:59\",\"status\":\"draft\",\"validation_type\":null,\"validation_emails\":null,\"replacement_for\":\"\",\"fingerprint_sha1\":null,\"brand_validation\":null,\"validation\":{\"email_validation\":{\"redacted\":[\"admin@redacted\",\"administrator@redacted\",\"hostmaster@redacted\",\"postmaster@redacted\",\"webmaster@redacted\",\"admin@redacted.com\",\"administrator@redacted.com\",\"hostmaster@redacted.com\",\"postmaster@redacted.com\",\"webmaster@redacted.com\"]},\"other_methods\":{\"redacted\":{\"file_validation_url_http\":\"http:\\/\\/redacted\\/.well-known\\/pki-validation\\/redacted.txt\",\"file_validation_url_https\":\"https:\\/\\/redacted\\/.well-known\\/pki-validation\\/redacted.txt\",\"file_validation_content\":[\"redacted\",\"redacted.com\",\"redacted\"],\"cname_validation_p1\":\"redacted.redacted\",\"cname_validation_p2\":\"redacted.redacted.abd3bfcd7daed3d.redacted.com\"}}},\"signature_algorithm_properties\":null} decode_error=json: unknown field \"signature_algorithm_properties\")",
  "attempt": 1,
  "retrying_in": 60,
  "elapsed": 1.312670204,
  "max_duration": 2592000
}

3. Caddy version:

caddy version is 2.9.0

5. Links to relevant resources:

I can see there was an issue raised and it was merged , however want to understand whether the package has been created or not and which caddy version to be used.
Also how are we planning to fix this particular issue in future if it occurs, since response structure can have new fields.

Yes, we’re discussing in that issue how to add resiliency. The problem is the current API doesn’t make it easy to do so (AFAIK, last time I checked).

For now you can always build with xcaddy: xcaddy build –with github.com/caddyserver/zerossl@9a4fc4cf5dc7096c317b58fe6f7e6032f50bb130

Thanks @matt for the quick response and help. This will solve our issue.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.