Certificate renewal checks only using ipv6 dns even if it times out. about caddy

[francislavoie]

Thanks!

For ref, it was fixed in caddyserver/certmagic#274, part of that being we return true after the first successful propagation check, instead of trying them all and failing if one fails.

[francislavoie]

Why is your system configured with an IPv6 DNS resolver then? Go's stdlib takes the list of resolves from your system's resolv.conf, pretty sure.

[balki]

I think we might've already fixed that. Can you try with v2.8.0-beta.1?

Tried with beta. Certificate renewal works fine now. Thanks!

[balki]

It is coming from the network. Not explicitly configured. I am still trying to figure out how to remove that or get ipv6 working. For now If I disable ipv6 in the router, it works fine.

However caddy should also try all revolvers available and not keep re-trying the broken one. All other apps resolve fine and also caddy resolves correctly in some cases. E.g. it resolved fine when it creates the ACME TXT record but broken when trying to check if is propagated.

[francislavoie]

I think we might've already fixed that. Can you try with v2.8.0-beta.1?

[mholt]

Hurray! Thanks 👍