Skip to content

Certificates are not generated #1221

@AlistairMaccallum

Description

@AlistairMaccallum

Hi,

I'm trying to generate some certs all using docker using zerossl, aws and dns-01 but the certificates never seem to generate, I keep getting the following error.

Info: running acme-companion version v2.6.1-24-g271f91a
Info: Setting up 4096 bits RFC7919 Diffie-Hellman group...
Reloading nginx proxy (nginx-proxy)...
2025/11/06 16:52:13 Generated '/etc/nginx/conf.d/default.conf' from 6 containers
2025/11/06 16:52:13 [notice] 101#101: signal process started
2025/11/06 16:52:13 Generated '/app/letsencrypt_service_data' from 6 containers
2025/11/06 16:52:13 Running '/app/signal_le_service'
2025/11/06 16:52:13 Watching docker events
2025/11/06 16:52:13 Contents of /app/letsencrypt_service_data did not change. Skipping notification '/app/signal_le_service'
Creating/renewal my.domain certificates... (my.domain)
https://github.com/acmesh-official/acme.sh
v3.1.1
[Thu Nov  6 16:52:14 UTC 2025] Using CA: https://acme.zerossl.com/v2/DV90
[Thu Nov  6 16:52:14 UTC 2025] Using pre-generated key: /etc/acme.sh/myemail@mycompany.com/my.domain/my.domain.key.next
[Thu Nov  6 16:52:14 UTC 2025] Generating next pre-generate key.
[Thu Nov  6 16:52:15 UTC 2025] Single domain='my.domain'
[Thu Nov  6 16:52:18 UTC 2025] Getting webroot for domain='my.domain'
[Thu Nov  6 16:52:19 UTC 2025] Verifying: my.domain
[Thu Nov  6 16:52:19 UTC 2025] Processing. The CA is processing your order, please wait. (1/30)
[Thu Nov  6 16:52:22 UTC 2025] The retryafter=86400 value is too large (> 600), will not retry anymore.
[Thu Nov  6 16:52:22 UTC 2025] Please check log file for more details: /dev/null
Sleep for 3600s
2025/11/06 16:52:43 Received event health_status: healthy for container a922996b837d
2025/11/06 16:52:46 Received signal: terminated
2025/11/06 16:52:46 Received signal: terminated
Info: running acme-companion version v2.6.1-24-g271f91a
Info: Setting up 4096 bits RFC7919 Diffie-Hellman group...
Reloading nginx proxy (nginx-proxy)...
2025/11/06 16:53:11 Generated '/etc/nginx/conf.d/default.conf' from 6 containers
2025/11/06 16:53:11 [notice] 154#154: signal process started
2025/11/06 16:53:11 Contents of /app/letsencrypt_service_data did not change. Skipping notification '/app/signal_le_service'
2025/11/06 16:53:11 Watching docker events
2025/11/06 16:53:11 Contents of /app/letsencrypt_service_data did not change. Skipping notification '/app/signal_le_service'
https://github.com/acmesh-official/acme.sh
v3.1.1
[Thu Nov  6 16:53:12 UTC 2025] Account key creation OK.
[Thu Nov  6 16:53:12 UTC 2025] No EAB credentials found for ZeroSSL, let's obtain them
[Thu Nov  6 16:53:14 UTC 2025] Registering account: https://acme.zerossl.com/v2/DV90
[Thu Nov  6 16:53:15 UTC 2025] Registered
[Thu Nov  6 16:53:15 UTC 2025] ACCOUNT_THUMBPRINT='h83ew3Ik1ygGvEEcBp5aKdnjY60fiDR1k6fIszdeDW8'
Creating/renewal my.domain certificates... (my.domain)
https://github.com/acmesh-official/acme.sh
v3.1.1
[Thu Nov  6 16:53:16 UTC 2025] Using CA: https://acme.zerossl.com/v2/DV90
[Thu Nov  6 16:53:16 UTC 2025] Creating domain key
[Thu Nov  6 16:53:17 UTC 2025] The domain key is here: /etc/acme.sh/myemail@mycompany.com/my.domain/my.domain.key
[Thu Nov  6 16:53:17 UTC 2025] Generating next pre-generate key.
[Thu Nov  6 16:53:18 UTC 2025] Single domain='my.domain'
[Thu Nov  6 16:53:21 UTC 2025] Getting webroot for domain='my.domain'
[Thu Nov  6 16:53:21 UTC 2025] Verifying: my.domain
[Thu Nov  6 16:53:22 UTC 2025] Processing. The CA is processing your order, please wait. (1/30)
[Thu Nov  6 16:53:30 UTC 2025] Pending. The CA is processing your order, please wait. (2/30)
[Thu Nov  6 16:53:38 UTC 2025] Pending. The CA is processing your order, please wait. (3/30)
[Thu Nov  6 16:53:46 UTC 2025] Pending. The CA is processing your order, please wait. (4/30)
[Thu Nov  6 16:53:54 UTC 2025] Pending. The CA is processing your order, please wait. (5/30)
[Thu Nov  6 16:54:02 UTC 2025] Pending. The CA is processing your order, please wait. (6/30)
[Thu Nov  6 16:54:10 UTC 2025] Pending. The CA is processing your order, please wait. (7/30)
[Thu Nov  6 16:54:17 UTC 2025] Pending. The CA is processing your order, please wait. (8/30)
[Thu Nov  6 16:54:25 UTC 2025] Pending. The CA is processing your order, please wait. (9/30)
[Thu Nov  6 16:54:33 UTC 2025] Pending. The CA is processing your order, please wait. (10/30)
[Thu Nov  6 16:54:41 UTC 2025] Pending. The CA is processing your order, please wait. (11/30)
[Thu Nov  6 16:54:50 UTC 2025] Pending. The CA is processing your order, please wait. (12/30)
[Thu Nov  6 16:54:58 UTC 2025] Pending. The CA is processing your order, please wait. (13/30)
[Thu Nov  6 16:55:05 UTC 2025] Pending. The CA is processing your order, please wait. (14/30)
[Thu Nov  6 16:55:14 UTC 2025] Pending. The CA is processing your order, please wait. (15/30)
[Thu Nov  6 16:55:22 UTC 2025] Pending. The CA is processing your order, please wait. (16/30)
[Thu Nov  6 16:55:25 UTC 2025] The retryafter=86400 value is too large (> 600), will not retry anymore.
[Thu Nov  6 16:55:25 UTC 2025] Please check log file for more details: /dev/null
Sleep for 3600s
2025/11/06 17:00:48 Received signal: terminated
2025/11/06 17:00:48 Received signal: terminated

These are the ENV Vars I have set on the acme-companiion container are

environment:
      - NGINX_PROXY_CONTAINER=nginx-proxy
      - DEFAULT_EMAIL=myemail@mycompany.com
      - ACME_CA_URI=https://acme.zerossl.com/v2/DV90
      #- ACME_CA_URI=https://acme-staging-v02.api.letsencrypt.org/directory
      - ACME_CHALLENGE_TYPE=DNS-01
      - DNS_API=dns_aws
      - AWS_ACCESS_KEY_ID=myid
      - AWS_SECRET_ACCESS_KEY=mykey
      - AWS_REGION=my-region-1
      - DEBUG=1

and these are the ENV Vars I have set on the app Container

    environment:
      - VIRTUAL_HOST=my.domain
      - LETSENCRYPT_HOST=my.domain
      - LETSENCRYPT_EMAIL=myemail@mycompany.com
  • When I use these setting with the acme.sh script on the same machine it works correctly.
  • The application is working correctly as I can access via port 80.
  • Even if I wait beyond the timeout the same error message appears

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions