acme-client failed for me several times with:

   acme-client: transfer buffer: [{
     "type": "urn:ietf:params:acme:error:conflict",
     "detail": "Unable to update challenge :: failed to mark authz as 
processing: Authorization is already being validated.
   This may indicate your client attempted the same challenge multiple times, 
possibly due to a client bug.",
     "status": 409
   }] (296 bytes)
   acme-client: bad exit: netproc(24709): 1

This was on a domain with 8 alternate names, where I was triggering a
renewal after adding the last two.

My impression is that if the validation is pending, acme-client sleeps
RETRY_DELAY, and then POSTs to the same challenge URL again. This second
POST to the same URL is where the server (letsencrypt/Boulder) returns
409.

The process dies at this point, and I need to retry until the validation
takes less than 5 seconds.

-- 
Hugo

Reply via email to