Skip to content

Commit 9a2de01

Browse files
epatmalnieks-gcwallrj-cyberark
authored andcommitted
Adds troubleshooting guide for host missmatch error
Signed-off-by: Edgars Patmalnieks <epatmalnieks@gocardless.com>
1 parent ff5399a commit 9a2de01

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

  • content/docs/troubleshooting

content/docs/troubleshooting/acme.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,7 @@ Events:
5858
* `Failed to update ACME account:400 urn:ietf:params:acme:error:invalidEmail`: the email you specified in the Issuer configuration isn't valid.
5959
* `Error initializing issuer: Failed to register ACME account: secrets "acme-key" already exists`: there might be a leftover account from a previous issuer that is no longer valid, you should remove the secret so it can be recreated.
6060
* `Error accepting challenge: 400 urn:ietf:params:acme:error:malformed: Unable to update challenge :: authorization must be pending`: this suggests that the authorization was not in 'pending' state at a time when cert-manager sent a request to the ACME server to accept the challenge. This may be because the domain validation has already failed and the authorization has been marked as 'invalid'. Check the authorization URL on the status of the `Order` or `Challenge` to see the status of the authorization and any additional information.
61+
* `ACME server URL host and ACME private key registration host differ` This error means that host resolved by the node differs from the host in your private key. Please check your `/etc/resolv.conf` if the correct host is resolved.
6162

6263
## 2. Troubleshooting Orders
6364

0 commit comments

Comments
 (0)