Unable to obtain ACME certificate for domains

"Life is all about sharing. If we are good at something, pass it on." - Mary Berry

Unable to obtain ACME certificate for domains

2020-12-28

Categories: DevOps

Lets Encrypt tells me that my domain contains an invalid character. What is it?

remark42 is configured like this:

  remark42:
    image: umputun/remark42:arm64
    container_name: "remark42"
    restart: always
    labels:
      - traefik.enable=true
      - traefik.http.routers.remark42.rule=Host(`${REMARK_URL}`)
      - traefik.http.routers.remark42.entrypoints=https
      - traefik.http.routers.remark42.tls.certresolver=le
      - traefik.http.services.remark42.loadbalancer.server.port=8080

Running docker-compose up -d remark42, and I saw the following error in the traefik logs:

time="2020-12-28T02:42:29Z" level=error msg="Unable to obtain ACME certificate for domains \"https://remark42.domain.com\": 
unable to generate a certificate for the domains [https://remark42.domain.com]: 
acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: 
Error creating new order :: Cannot issue for \"https://remark42.domain.com\": Domain name contains an invalid character, 
url: " providerName=le.acme routerName=remark42@docker rule="Host(`https://remark42.domain.com`)"

What’s going on? What character is invalid?

Looked at that error more closely, I figured out that the culprit is https://. Host rule should only contains the domain:

Tags: traefik letsencrypt

Edit on GitHub