Cloudflare ACME validation failing

[ishanjain]

Hi,

I have two nodes in a cluster. I have configured Cloudflare ACME and HTTPS for both nodes.

One node is able to generate fresh certificates and I can access it over HTTPS. The second node fails to get a TLS certificate and I get unknown cert errors when I try to open it's web ui. ACME config is shared across the cluster so I am a little confused why 1 node works fine but the second doesn't.
How should I debug this?

root@pve:~# pvenode acme cert order --force
Loading ACME account details
Placing ACME order
Order URL: https://acme-staging-v02.api.letsencrypt.org/acme/order/143856494/19232822663

Getting authorization details from 'https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/14074483783'
The validation for pve.home.ishanjain.me is pending!
[Fri Sep 20 00:24:58 IST 2024] Error
[Fri Sep 20 00:24:58 IST 2024] Error add txt for domain:_acme-challenge.pve.home.ishanjain.me
command 'setpriv --reuid nobody --regid nogroup --clear-groups --reset-env -- /bin/bash /usr/share/proxmox-acme/proxmox-acme setup cf pve.home.ishanjain.me' failed: exit code 1
Task command 'setpriv --reuid nobody --regid nogroup --clear-groups --reset-env -- /bin/bash /usr/share/proxmox-acme/proxmox-acme setup cf pve.home.ishanjain.me' failed: exit code 1

 

[ishanjain]

It is fixed! It was using LE staging account instead of the production account.