On 2025-11-21 (Fr.) 10:55, William Lallemand wrote:
On Fri, Nov 21, 2025 at 10:45:21AM +0100, Aleksandar Lazic wrote:
acme: none.at.pem: Starting update of the certificate.
[...]
acme: none.at.pem: dns-01 requires to set the "_acme-challenge.none.at" TXT
record to "9MMRzvJDo0zBFT72sBY0R_qprSj2DDpgGp_BtU8IqfY" and use the "acme
[...]
acme: none.at.pem: dns-01 requires to set the "_acme-challenge.none.at" TXT
record to "jr7eGbpPeNcVHlbpwRM0MeqNZvXYhH351mrUw1EMCuk" and use the "acme
challenge_ready none.at.pem domain none.at" command over the CLI
[...]
-:- [21/Nov/2025:04:31:12.901] <ACME> -/- 5/0/0/485/488 200 1010 - - ----
0/0/0/0/0 0/0 {2606:4700:60:0:f41b:d4fe:4325:6026} "POST
https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20346316043/1_f3SQ
Seems like a bug to me, since there are 2 domains it generated 2 challenges to
set but your wildcard has the same base as the 2nd domain so there's a
problem. I'll take a look.
The task seems stuck waiting for every challenge_ready. I think I'll add more
states in the `acme status` command so we can debug this more easily.
Thank you.
Maybe some `trace acme ...???` can help here?
That won't help because it's not the traffic, it's just waiting for all
challenge_ready commands.
But traces are already available with -dt acme:developer:complete if you need
them.
Thank you.
I will wait for your patches to test the ACME DNS setup to make it
production reday :-)
Should I create an Issue for that or do you want to keept the work on the ML?
I don't think a ticket is needed, unless you really want one. I'm already
working on it.
Great. Just for your info here the trace output.
```
alex@alex-tuxedoinfinitybooks1517gen7 on 21/11/2025 at 11:01:40_CET
/datadisk/git-repos/haproxy $
# ./haproxy -W -d -f ../haproxy_acme.cfg -dt acme:developer:complete
[NOTICE] (107223) : Initializing new worker (107225)
[NOTICE] (107225) : config : No certificate available for 'none.at.pem',
generating a temporary key pair before getting the ACME certificate
Using epoll() as the polling mechanism.
Sharing caphdr with caphdr
Sharing caphdr with caphdr
Sharing ptrcap with ptrcap
Sharing ptrcap with ptrcap
[NOTICE] (107225) : Automatically setting global.maxconn to 524263.
Available polling systems :
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result FAILED
Total: 3 (2 usable), will use epoll.
Available filters :
[BWLIM] bwlim-in
[BWLIM] bwlim-out
[CACHE] cache
[COMP] compression
[FCGI] fcgi-app
[SPOE] spoe
[TRACE] trace
Using epoll() as the polling mechanism.
Sharing stk_ctr with caphdr
00000000:MASTER.accept(0004)=0007 from [unix:1] ALPN=<none>
[NOTICE] (107223) : Loading success.
00000000:MASTER.srvcls[0007:ffff]
00000001:MASTER.clicls[0007:ffff]
00000001:MASTER.closed[0007:ffff]
[00|acme|1|c/acme.c:2508] ACME Scheduling start :
acme: none.at.pem: Starting update of the certificate.
[00|acme|1|c/acme.c:2806] ACME Task start : acme_ctx=0x5ec7f485bdd0,
crt=none.at.pem
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_RESOURCES
00000000:<ACME>.clireq[ffffffff:ffffffff]: GET
https://acme-staging-v02.api.letsencrypt.org/directory HTTP/1.1
00000000:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000000:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000000:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000000:<ACME>.clireq[ffffffff:ffffffff]: GET
https://acme-staging-v02.api.letsencrypt.org/directory HTTP/1.1
00000000:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000000:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000000:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000000:<ACME>.srvcls[ffff:0021]
00000000:<ACME>.srvrep[ffffffff:0021]: HTTP/2.0 200
00000000:<ACME>.srvhdr[ffffffff:0021]: server: nginx
00000000:<ACME>.srvhdr[ffffffff:0021]: date: Fri, 21 Nov 2025 10:02:08 GMT
00000000:<ACME>.srvhdr[ffffffff:0021]: content-type: application/json
00000000:<ACME>.srvhdr[ffffffff:0021]: content-length: 1137
00000000:<ACME>.srvhdr[ffffffff:0021]: cache-control: public, max-age=0,
no-cache
00000000:<ACME>.srvhdr[ffffffff:0021]: x-frame-options: DENY
00000000:<ACME>.srvhdr[ffffffff:0021]: strict-transport-security: max-age=604800
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_RESOURCES
[00|acme|4|c/acme.c:2111] acme_directory : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_RESOURCES Buffer Dump:
{
"keyChange": "https://acme-staging-v02.api.letsencrypt.org/acme/key-change";,
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"profiles": {
"classic": "https://letsencrypt.org/docs/profiles#classic";,
"shortlived": "https://letsencrypt.org/docs/profiles#shortlived (not yet
generally available)",
"tlsclient": "https://letsencrypt.org/docs/profiles#tlsclient";,
"tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver";
},
"termsOfService":
"https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf";,
"website": "https://letsencrypt.org/docs/staging-environment/";
},
"newAccount": "https://acme-staging-v02.api.letsencrypt.org/acme/new-acct";,
"newNonce": "https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce";,
"newOrder": "https://acme-staging-v02.api.letsencrypt.org/acme/new-order";,
"oO33JG01Hl4":
"https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417";,
"renewalInfo":
"https://acme-staging-v02.api.letsencrypt.org/acme/renewal-info";,
"revokeCert": "https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert";
}
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_NEWNONCE
00000000:<ACME>.clicls[ffff:0021]
00000000:<ACME>.closed[ffff:0021]
-:- [21/Nov/2025:11:02:07.452] <ACME> -/- 135/0/721/160/1014 200 152 - - ----
0/0/0/0/0 0/0 {2606:4700:60:0:f41b:d4fe:4325:6026} "GET
https://acme-staging-v02.api.letsencrypt.org/directory HTTP/1.1"
0/0000000000000000/-/-/0 -/-/-
00000001:<ACME>.clireq[ffffffff:ffffffff]: HEAD
https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce HTTP/1.1
00000001:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000001:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000001:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000001:<ACME>.clireq[ffffffff:ffffffff]: HEAD
https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce HTTP/1.1
00000001:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000001:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000001:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000001:<ACME>.srvcls[ffff:0021]
00000001:<ACME>.srvrep[ffffffff:0021]: HTTP/2.0 200
00000001:<ACME>.srvhdr[ffffffff:0021]: server: nginx
00000001:<ACME>.srvhdr[ffffffff:0021]: date: Fri, 21 Nov 2025 10:02:08 GMT
00000001:<ACME>.srvhdr[ffffffff:0021]: cache-control: public, max-age=0,
no-cache
00000001:<ACME>.srvhdr[ffffffff:0021]: link:
<https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
00000001:<ACME>.srvhdr[ffffffff:0021]: replay-nonce:
K_WcMXRqhWiMJXl0YQhGo2Cj4nbB7_63lGgr7W5qfZxOD5cYRIw
00000001:<ACME>.srvhdr[ffffffff:0021]: x-frame-options: DENY
00000001:<ACME>.srvhdr[ffffffff:0021]: strict-transport-security: max-age=604800
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_NEWNONCE
[00|acme|4|c/acme.c:2071] acme_nonce : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_NEWNONCE Buffer Dump:
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_CHKACCOUNT
[00|acme|4|c/acme.c:1972] newAccount Decoded : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_CHKACCOUNT url:
https://acme-staging-v02.api.letsencrypt.org/acme/new-acct Buffer Dump:
{
"termsOfServiceAgreed": true,
"onlyReturnExisting": true
}
00000001:<ACME>.clicls[ffff:0021]
00000001:<ACME>.closed[ffff:0021]
-:- [21/Nov/2025:11:02:08.466] <ACME> -/- 2/0/0/156/156 200 158 - - ----
0/0/0/0/0 0/0 {2606:4700:60:0:f41b:d4fe:4325:6026} "HEAD
https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce HTTP/1.1"
0/0000000000000000/-/-/0 -/-/-
00000002:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/new-acct HTTP/1.1
00000002:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000002:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000002:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000002:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000002:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 1243
00000002:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/new-acct HTTP/1.1
00000002:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000002:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000002:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000002:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000002:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 1243
00000002:<ACME>.srvcls[ffff:0021]
00000002:<ACME>.srvrep[ffffffff:0021]: HTTP/2.0 200
00000002:<ACME>.srvhdr[ffffffff:0021]: server: nginx
00000002:<ACME>.srvhdr[ffffffff:0021]: date: Fri, 21 Nov 2025 10:02:08 GMT
00000002:<ACME>.srvhdr[ffffffff:0021]: content-type: application/json
00000002:<ACME>.srvhdr[ffffffff:0021]: content-length: 467
00000002:<ACME>.srvhdr[ffffffff:0021]: boulder-requester: 244744183
00000002:<ACME>.srvhdr[ffffffff:0021]: cache-control: public, max-age=0,
no-cache
00000002:<ACME>.srvhdr[ffffffff:0021]: link:
<https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
00000002:<ACME>.srvhdr[ffffffff:0021]: location:
https://acme-staging-v02.api.letsencrypt.org/acme/acct/244744183
00000002:<ACME>.srvhdr[ffffffff:0021]: replay-nonce:
XVP_df_uZ7ptFcNaYDE7UOGTZ7uXpmDXJzAxPbB1ffO03WOv_eM
00000002:<ACME>.srvhdr[ffffffff:0021]: x-frame-options: DENY
00000002:<ACME>.srvhdr[ffffffff:0021]: strict-transport-security: max-age=604800
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_CHKACCOUNT
[00|acme|4|c/acme.c:2023] acme_res_account : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_CHKACCOUNT Buffer Dump:
{
"key": {
"kty": "RSA",
"n":
"qWklxWp17Q3qyrohlqn9W7x-13NHBOgxShV6ijhlxP0dUiecc8QGfWZcDbnFokv4bX-Wogat6JC3KzJeLLbIo5AyakJMEI-TflSKjeoiqHppJN0YAwImsBo5PMhyu1eRZzrh6D2vXGmWmVh9vU-QeT-AHc-jew4YECFULaMGopFdL7jXAabYjdIprj-dQRL0wGwTpHmIsaqQbZj7fS_3Ogoed7VVNFL9yAdKJTXz3y5Z-skRsTb7hOXa31woR3dXKHJ7QbZkeKozuGSPcGTsH1d4pX22QeBPUqP5mYpv6Y8KUHbTQTAplmlCMR_F7c1ud8L4XlZTuAWl5PXh1oRC6w",
"e": "AQAB"
},
"createdAt": "2025-11-21T03:29:04Z",
"status": "valid"
}
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_NEWORDER
[00|acme|4|c/acme.c:1808] NewOrder Decode : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_NEWORDER url:
https://acme-staging-v02.api.letsencrypt.org/acme/new-order Buffer Dump:
{ "identifiers": [ { "type": "dns", "value": "*.none.at" },{ "type": "dns",
"value": "none.at" } ] }
[00|acme|4|c/acme.c:1814] NewOrder JWS : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_NEWORDER url:
https://acme-staging-v02.api.letsencrypt.org/acme/new-order Buffer Dump:
{
"protected":
"ewogICAgImFsZyI6ICJSUzI1NiIsCiAgICAia2lkIjogICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjQ0NzQ0MTgzIiwKICAgICJub25jZSI6ICAgIlhWUF9kZl91WjdwdEZjTmFZREU3VU9HVFo3dVhwbURYSnpBeFBiQjFmZk8wM1dPdl9lTSIsCiAgICAidXJsIjogICAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9uZXctb3JkZXIiCn0K",
"payload":
"eyAiaWRlbnRpZmllcnMiOiBbIHsgInR5cGUiOiAiZG5zIiwgICJ2YWx1ZSI6ICIqLm5vbmUuYXQiIH0seyAidHlwZSI6ICJkbnMiLCAgInZhbHVlIjogIm5vbmUuYXQiIH0gXSB9",
"signature":
"kl6mTL5QwBTKxPW5QuWPdn8VRMiWHqUIVG_asxYS8uOEo90uMSQJ9gXTW2Vj2s_TxYONzLMRgAD1ud_S85H0uXFP1VgetnAjOMtcOAiynJJ0B0QsqRLqkjthM49n7WZaFBAqy53TBbBW5aOjG6aQl76vASHREYZFR_LyjaN1a12Yy6sZk4CG6-gfMTK7VJmTbKISVUSt04w4zpeFISQIrOr0nwNXrjykCiASmMQctd-LJrTQYrbxRKjhg2D-63pbD0x2fsdN__8eVS1t93nhqsNm13xdyhZuaOWLM_wiAEU1Fo_Y1x_PfK2GYmpNceafKZp3v1hTcPBbfJ8lW_3f9g"
}
00000002:<ACME>.clicls[ffff:0021]
00000002:<ACME>.closed[ffff:0021]
-:- [21/Nov/2025:11:02:08.623] <ACME> -/- 2/0/0/371/371 200 1451 - - ----
0/0/0/0/0 0/0 {2606:4700:60:0:f41b:d4fe:4325:6026} "POST
https://acme-staging-v02.api.letsencrypt.org/acme/new-acct HTTP/1.1"
0/0000000000000000/-/-/0 -/-/-
00000003:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/new-order HTTP/1.1
00000003:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000003:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000003:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000003:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000003:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 876
00000003:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/new-order HTTP/1.1
00000003:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000003:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000003:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000003:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000003:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 876
00000003:<ACME>.srvcls[ffff:0021]
00000003:<ACME>.srvrep[ffffffff:0021]: HTTP/2.0 201
00000003:<ACME>.srvhdr[ffffffff:0021]: server: nginx
00000003:<ACME>.srvhdr[ffffffff:0021]: date: Fri, 21 Nov 2025 10:02:09 GMT
00000003:<ACME>.srvhdr[ffffffff:0021]: content-type: application/json
00000003:<ACME>.srvhdr[ffffffff:0021]: content-length: 499
00000003:<ACME>.srvhdr[ffffffff:0021]: boulder-requester: 244744183
00000003:<ACME>.srvhdr[ffffffff:0021]: cache-control: public, max-age=0,
no-cache
00000003:<ACME>.srvhdr[ffffffff:0021]: link:
<https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
00000003:<ACME>.srvhdr[ffffffff:0021]: location:
https://acme-staging-v02.api.letsencrypt.org/acme/order/244744183/28906831083
00000003:<ACME>.srvhdr[ffffffff:0021]: replay-nonce:
K_WcMXRqeCi6pPIkXvHzbUbkNsg-8Begz2sqoZwkz4cUCI9ZIYs
00000003:<ACME>.srvhdr[ffffffff:0021]: x-frame-options: DENY
00000003:<ACME>.srvhdr[ffffffff:0021]: strict-transport-security: max-age=604800
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_NEWORDER
[00|acme|4|c/acme.c:1863] acme_res_neworder : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_NEWORDER Buffer Dump:
{
"status": "pending",
"expires": "2025-11-28T10:02:09Z",
"identifiers": [
{
"type": "dns",
"value": "*.none.at"
},
{
"type": "dns",
"value": "none.at"
}
],
"authorizations": [
"https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998303";,
"https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998313";
],
"finalize":
"https://acme-staging-v02.api.letsencrypt.org/acme/finalize/244744183/28906831083";
}
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_AUTH
[00|acme|1|c/acme.c:1566] POST-as-GET : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_AUTH url:
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998313
[00|acme|4|c/acme.c:1572] POST-as-GET enc : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_AUTH url:
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998313
Buffer Dump:
{
"protected":
"ewogICAgImFsZyI6ICJSUzI1NiIsCiAgICAia2lkIjogICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjQ0NzQ0MTgzIiwKICAgICJub25jZSI6ICAgIktfV2NNWFJxZUNpNnBQSWtYdkh6YlVia05zZy04QmVnejJzcW9ad2t6NGNVQ0k5WklZcyIsCiAgICAidXJsIjogICAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei8yNDQ3NDQxODMvMjAzNDk5OTgzMTMiCn0K",
"payload": "",
"signature":
"SMJjJbXZUs_i8iQ8CUXSTJhE9-dzL4atlI1tUpl6HPrB3MlHhc-7Tf1sQseHu4OTE0Hh-Qu2lbTRrmaaC2MNlxggseCrt8Oj7d2AsL-JvYAN2Dx1sEqJ670T4fHh1vhPfmhbnJ_U-NphdC5NQUgNZ5e8QADUP-hwb98AiTggD8-fQKbh6xxP0aLe5w-sn8h6Tddj6pXGLEzN9kaAzErjFj2jriGg2YwGlQlifrfCAWNpWD0R_K5urxf0gsnAtnZBjtOpsMXH_np0aCgH4FANnAS_SYgFCzgcV5JurYYMepIRiv92bioP6ZVBYGepkJ_asbm6cZ0SFGoxp4PVHeRgXw"
}
00000003:<ACME>.clicls[ffff:0021]
00000003:<ACME>.closed[ffff:0021]
-:- [21/Nov/2025:11:02:08.994] <ACME> -/- 2/0/0/165/165 201 1084 - - ----
0/0/0/0/0 0/0 {2606:4700:60:0:f41b:d4fe:4325:6026} "POST
https://acme-staging-v02.api.letsencrypt.org/acme/new-order HTTP/1.1"
0/0000000000000000/-/-/0 -/-/-
00000004:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998313
HTTP/1.1
00000004:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000004:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000004:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000004:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000004:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 764
00000004:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998313
HTTP/1.1
00000004:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000004:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000004:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000004:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000004:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 764
00000004:<ACME>.srvcls[ffff:0021]
00000004:<ACME>.srvrep[ffffffff:0021]: HTTP/2.0 200
00000004:<ACME>.srvhdr[ffffffff:0021]: server: nginx
00000004:<ACME>.srvhdr[ffffffff:0021]: date: Fri, 21 Nov 2025 10:02:09 GMT
00000004:<ACME>.srvhdr[ffffffff:0021]: content-type: application/json
00000004:<ACME>.srvhdr[ffffffff:0021]: content-length: 833
00000004:<ACME>.srvhdr[ffffffff:0021]: boulder-requester: 244744183
00000004:<ACME>.srvhdr[ffffffff:0021]: cache-control: public, max-age=0,
no-cache
00000004:<ACME>.srvhdr[ffffffff:0021]: link:
<https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
00000004:<ACME>.srvhdr[ffffffff:0021]: replay-nonce:
K_WcMXRqx1-HKJrVER2mVBnMkMQ4dIG0srbvHBgvH6XtmjEZUYE
00000004:<ACME>.srvhdr[ffffffff:0021]: x-frame-options: DENY
00000004:<ACME>.srvhdr[ffffffff:0021]: strict-transport-security: max-age=604800
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_AUTH
[00|acme|4|c/acme.c:1628] acme_res_auth : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_AUTH Buffer Dump:
{
"identifier": {
"type": "dns",
"value": "none.at"
},
"status": "pending",
"expires": "2025-11-28T10:02:09Z",
"challenges": [
{
"type": "tls-alpn-01",
"url":
"https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/mXw73Q";,
"status": "pending",
"token": "xL0PjZKiS2KvwRfUfaZeZT2cW-uSsy3MiqHl3rNqx8E"
},
{
"type": "dns-01",
"url":
"https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/Or6H6w";,
"status": "pending",
"token": "xL0PjZKiS2KvwRfUfaZeZT2cW-uSsy3MiqHl3rNqx8E"
},
{
"type": "http-01",
"url":
"https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/VjaXVA";,
"status": "pending",
"token": "xL0PjZKiS2KvwRfUfaZeZT2cW-uSsy3MiqHl3rNqx8E"
}
]
}
acme: none.at.pem: dns-01 requires to set the "_acme-challenge.none.at" TXT
record to "ItQ9LAdDVZ6GK5-kAhOta68luGP_k_0O6B1RJDHytew" and use the "acme
challenge_ready none.at.pem domain none.at" command over the CLI
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_AUTH
[00|acme|1|c/acme.c:1566] POST-as-GET : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_AUTH url:
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998303
[00|acme|4|c/acme.c:1572] POST-as-GET enc : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_AUTH url:
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998303
Buffer Dump:
{
"protected":
"ewogICAgImFsZyI6ICJSUzI1NiIsCiAgICAia2lkIjogICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjQ0NzQ0MTgzIiwKICAgICJub25jZSI6ICAgIktfV2NNWFJxeDEtSEtKclZFUjJtVkJuTWtNUTRkSUcwc3JidkhCZ3ZINlh0bWpFWlVZRSIsCiAgICAidXJsIjogICAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei8yNDQ3NDQxODMvMjAzNDk5OTgzMDMiCn0K",
"payload": "",
"signature":
"ax18BUbk-fKBtwhsZOPSbLCshOFsXenw82GMUy1zH01WFzFyPljMYGbAux50Q0FqITm8a7e_Hjzo9C-PT2p7vp90pJdekWufHlDNWn3casAlCwgaZxoAgxBBuIezYtwyYdXWYYQA-03rSilRCvwtTopprwe6p6aa2Du-FsUBcYUBfMMo2rlunSPT_To54_9Dxt9g2YDmDFN6c-e7C_cYJnU-D87OF4_xfyb0bCQHyXRrTTYQrWTkX93yyAjdCDHiVEkKJD5LcpziQbzk5MxuoLXUJx7loSbN8tKuDobjKC_eJVj-SBB5isiByycWfUKiggxzMQ0uQo9Cyy-Sw4MsFw"
}
00000004:<ACME>.clicls[ffff:0021]
00000004:<ACME>.closed[ffff:0021]
-:- [21/Nov/2025:11:02:09.159] <ACME> -/- 2/0/0/159/159 200 990 - - ----
0/0/0/0/0 0/0 {2606:4700:60:0:f41b:d4fe:4325:6026} "POST
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998313
HTTP/1.1" 0/0000000000000000/-/-/0 -/-/-
00000005:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998303
HTTP/1.1
00000005:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000005:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000005:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000005:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000005:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 764
00000005:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998303
HTTP/1.1
00000005:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000005:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000005:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000005:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000005:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 764
00000005:<ACME>.srvcls[ffff:0021]
00000005:<ACME>.srvrep[ffffffff:0021]: HTTP/2.0 200
00000005:<ACME>.srvhdr[ffffffff:0021]: server: nginx
00000005:<ACME>.srvhdr[ffffffff:0021]: date: Fri, 21 Nov 2025 10:02:09 GMT
00000005:<ACME>.srvhdr[ffffffff:0021]: content-type: application/json
00000005:<ACME>.srvhdr[ffffffff:0021]: content-length: 395
00000005:<ACME>.srvhdr[ffffffff:0021]: boulder-requester: 244744183
00000005:<ACME>.srvhdr[ffffffff:0021]: cache-control: public, max-age=0,
no-cache
00000005:<ACME>.srvhdr[ffffffff:0021]: link:
<https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
00000005:<ACME>.srvhdr[ffffffff:0021]: replay-nonce:
XVP_df_uMMsGZZWgJQwCnC-gUvzIQz8Wnj37K1MA-XN9eZu6mKM
00000005:<ACME>.srvhdr[ffffffff:0021]: x-frame-options: DENY
00000005:<ACME>.srvhdr[ffffffff:0021]: strict-transport-security: max-age=604800
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_AUTH
[00|acme|4|c/acme.c:1628] acme_res_auth : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_AUTH Buffer Dump:
{
"identifier": {
"type": "dns",
"value": "none.at"
},
"status": "pending",
"expires": "2025-11-28T10:02:09Z",
"challenges": [
{
"type": "dns-01",
"url":
"https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998303/zOEBUQ";,
"status": "pending",
"token": "bCgvtB9RNoj0SVTZj_-rMuWYPm6XVjkL4m6B8xNPm3o"
}
],
"wildcard": true
}
acme: none.at.pem: dns-01 requires to set the "_acme-challenge.none.at" TXT
record to "B530CEZ7M-TzRWO-sentzgTIwpSY57HoXChKkhMd3Mc" and use the "acme
challenge_ready none.at.pem domain none.at" command over the CLI
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_CHALLENGE
00000005:<ACME>.clicls[ffff:0021]
00000005:<ACME>.closed[ffff:0021]
-:- [21/Nov/2025:11:02:09.318] <ACME> -/- 2/0/0/160/160 200 990 - - ----
0/0/0/0/0 0/0 {2606:4700:60:0:f41b:d4fe:4325:6026} "POST
https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998303
HTTP/1.1" 0/0000000000000000/-/-/0 -/-/-
00000006:GLOBAL.accept(0009)=0022 from [unix:2] ALPN=<none>
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_CHALLENGE
[00|acme|4|c/acme.c:1450] REQ challenge dec : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_CHALLENGE url:
https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/Or6H6w
Buffer Dump:
{}
[00|acme|4|c/acme.c:1455] REQ challenge enc : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_CHALLENGE url:
https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/Or6H6w
Buffer Dump:
{
"protected":
"ewogICAgImFsZyI6ICJSUzI1NiIsCiAgICAia2lkIjogICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjQ0NzQ0MTgzIiwKICAgICJub25jZSI6ICAgIlhWUF9kZl91TU1zR1paV2dKUXdDbkMtZ1V2eklRejhXbmozN0sxTUEtWE45ZVp1Nm1LTSIsCiAgICAidXJsIjogICAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9jaGFsbC8yNDQ3NDQxODMvMjAzNDk5OTgzMTMvT3I2SDZ3Igp9Cg",
"payload": "e30",
"signature":
"RRn4qwOg334GbkQWXJd8FM_ZdOBvlzKAth_eFmLV99cm24D83WpufKS4Hw3-9hFNyPsnMlSlC58JT6wlyQQyelwbLU0tlfw717RJkxjbNkLotr9vvSHvyQiVrCmELMCJaBwcatdjW0hZ_h4RmOWSaFgw62DWMlLVoVmN-f7MXgnH4jGeOD_-2ULeL5qiVTyNYRPWOsH1eyAoLDunRgDXONj5adgjC5snK8cQsRgQJAe0vcTKuD1bYfJysCaZ0VHtWcGD0a12ouQ1PgIGMOym-49sJ7BO2Z-1DCEA_2k4dA2xiKzuJD5285_NQQ9cpU9ao7vtHd8lFn3aVYVVrpz41g"
}
00000007:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/Or6H6w
HTTP/1.1
00000007:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000007:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000007:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000007:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000007:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 777
00000006:GLOBAL.clicls[0022:ffff]
00000006:GLOBAL.srvcls[0022:ffff]
00000006:GLOBAL.closed[0022:ffff]
00000007:<ACME>.clireq[ffffffff:ffffffff]: POST
https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/Or6H6w
HTTP/1.1
00000007:<ACME>.clihdr[ffffffff:ffffffff]: content-type: application/jose+json
00000007:<ACME>.clihdr[ffffffff:ffffffff]: host:
acme-staging-v02.api.letsencrypt.org
00000007:<ACME>.clihdr[ffffffff:ffffffff]: accept: */*
00000007:<ACME>.clihdr[ffffffff:ffffffff]: user-agent: HAProxy
00000007:<ACME>.clihdr[ffffffff:ffffffff]: content-length: 777
00000007:<ACME>.srvcls[ffff:0021]
00000007:<ACME>.srvrep[ffffffff:0021]: HTTP/2.0 200
00000007:<ACME>.srvhdr[ffffffff:0021]: server: nginx
00000007:<ACME>.srvhdr[ffffffff:0021]: date: Fri, 21 Nov 2025 10:03:52 GMT
00000007:<ACME>.srvhdr[ffffffff:0021]: content-type: application/json
00000007:<ACME>.srvhdr[ffffffff:0021]: content-length: 200
00000007:<ACME>.srvhdr[ffffffff:0021]: boulder-requester: 244744183
00000007:<ACME>.srvhdr[ffffffff:0021]: cache-control: public, max-age=0,
no-cache
00000007:<ACME>.srvhdr[ffffffff:0021]: link:
<https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
00000007:<ACME>.srvhdr[ffffffff:0021]: link:
<https://acme-staging-v02.api.letsencrypt.org/acme/authz/244744183/20349998313>;rel="up"
00000007:<ACME>.srvhdr[ffffffff:0021]: location:
https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/Or6H6w
00000007:<ACME>.srvhdr[ffffffff:0021]: replay-nonce:
XVP_df_uFhFmJwzYSKEg-EgFyAyCkdN4rFH6j6SiK3YPNP1Fubk
00000007:<ACME>.srvhdr[ffffffff:0021]: x-frame-options: DENY
00000007:<ACME>.srvhdr[ffffffff:0021]: strict-transport-security: max-age=604800
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_CHALLENGE
[00|acme|4|c/acme.c:1491] acme_res_challenge : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_RES, st: ACME_CHALLENGE Buffer Dump:
{
"type": "dns-01",
"url":
"https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/Or6H6w";,
"status": "pending",
"token": "xL0PjZKiS2KvwRfUfaZeZT2cW-uSsy3MiqHl3rNqx8E"
}
[00|acme|1|c/acme.c:2175] ACME Task Handle : acme_ctx=0x5ec7f485bdd0, http_st:
ACME_HTTP_REQ, st: ACME_CHALLENGE
00000007:<ACME>.clicls[ffff:0021]
00000007:<ACME>.closed[ffff:0021]
-:- [21/Nov/2025:11:03:52.455] <ACME> -/- 4/0/0/474/476 200 1010 - - ----
0/0/0/0/0 0/0 {2606:4700:60:0:f41b:d4fe:4325:6026} "POST
https://acme-staging-v02.api.letsencrypt.org/acme/chall/244744183/20349998313/Or6H6w
HTTP/1.1" 0/0000000000000000/-/-/1 -/-/-
00000008:GLOBAL.accept(0009)=0022 from [unix:2] ALPN=<none>
00000008:GLOBAL.clicls[0022:ffff]
00000008:GLOBAL.srvcls[0022:ffff]
00000008:GLOBAL.closed[0022:ffff]
```
