problem with certs

[Raxiel1987]

i don't know why at first attemp to add a new certificate it fails.
if i Test Server Reachability it says me
There is no server available at this domain. Please make sure your domain exists and points to the IP where your NPM instance is running and if necessary port 80 is forwarded in your router.

and this is not possibile because it is in front of my network and with the npm "classic" i get the certificate without issue
the ports are correct, in the same docker i had the npm classic before upgrade to plus and crowdsec.
this is very strange, everytime i try a new certificate i get the error, but not if i try with npm classic.

after some minutes/hours it works..

how i can i solve this?

[Zoey2936]

Logs?

[Raxiel1987]

nothing special on logs

2024-08-09T09:44:46.973702849Z 2024/08/09 11:44:46 [error] 108550#108550: connect() to [2a02:26f0:118::adde:f509]:80 failed (101: Network unreachable) while requesting certificate status, responder: r3.o.lencr.org, peer: [2a02:26f0:118::adde:f509]:80, certificate: "/data/tls/certbot/live/npm-28/fullchain.pem"
2024-08-09T09:44:46.973746378Z 2024/08/09 11:44:46 [error] 108550#108550: connect() to [2a02:26f0:118::adde:f521]:80 failed (101: Network unreachable) while requesting certificate status, responder: r3.o.lencr.org, peer: [2a02:26f0:118::adde:f521]:80, certificate: "/data/tls/certbot/live/npm-28/fullchain.pem"
2024-08-09T09:46:05.270465984Z [SSL ] › ℹ info Requesting Certbot certificates for Cert #111: xxx.xxx.com.com
2024-08-09T09:46:05.270511086Z [SSL ] › ℹ info Command: certbot --logs-dir /tmp/certbot-log --work-dir /tmp/certbot-work --config-dir /data/tls/certbot certonly --config "/data/tls/certbot/config.ini" --cert-name "npm-111" --authenticator webroot --preferred-challenges "dns,http" --domains "xxx.xxxxx.com" --email "[email protected]"
2024-08-09T09:46:10.696701861Z [Express ] › ⚠ warning Saving debug log to /tmp/certbot-log/letsencrypt.log
2024-08-09T09:46:10.696766741Z An unexpected error occurred:
2024-08-09T09:46:10.696771746Z requests.exceptions.ConnectionError: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Max retries exceeded with url: /directory (Caused by NameResolutionError("<urllib3.connection.HTTPSConnection object at 0x7f2317add6a0>: Failed to resolve 'acme-v02.api.letsencrypt.org' ([Errno -3] Try again)"))
2024-08-09T09:46:10.696776731Z Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/certbot-log/letsencrypt.log or re-run Certbot with -v for more details.
2024-08-09T09:46:10.696780450Z

i removed my email and address but this is what i get

and if i try after 20 min or more it works and don't know why

[Zoey2936]

looks like your dns resolver does not always work

[Raxiel1987]

can you test with the :develop tag?

i will try

what i have to do? change the latest tag to develop?

[Zoey2936]

yes

[Raxiel1987]

yes

with develop seems to works well ( about 1/2 min for the dns propagation is ok)

[Zoey2936]

I will publish a new release today or monday

[Raxiel1987]

I will publish a new release today or monday

thank you :D