Context canceled when trying to obtain a cert. #2172

kevdogg · 2024-05-05T17:44:41Z

kevdogg
May 5, 2024

I'm trying to do something really easy (or so I though) but I'm not able to run lego to obtain a cert:

[email protected] CLOUDFLARE_API_KEY=xxxx /usr/bin/lego --email "[[email protected]](mailto:[email protected])" --accept-tos --dns cloudflare --dns.resolvers "9.9.9.9:53" --csr httpd-csr.der run --preferred-chain "DST Root CA X3" --run-hook install.sh

I'm receiving this error:

2024/05/05 12:32:32 [INFO] [ipa-quincy.domain.com] acme: Obtaining bundled SAN certificate given a CSR
2024/05/05 12:32:32 Could not obtain certificates:
	context canceled

I'm not sure what context canceled means.

For reference here is my CSR

#openssl req -text -in httpd-csr.der
Certificate Request:
    Data:
        Version: 1 (0x0)
        Subject: CN = ipa-quincy.domain.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:f5:4f:11:fe:41:3b:f2:0a:ee:a9:97:92:
                    3d:7e:3f:5d:7f:71:e7:a1:e2:e3:e3:79:ba:66:63:
                    b3:4d:ed:9b:86:ad:92:b2:27:76:6c:db:b5:20:6a:
                    eb:51:ab:88:1e:94:11:5d:3d:a5:ac:2d:fb:52:cf:
                    77:7a:fb:d7:29:0d:02:1e:64:22:85:65:2d:e8:a1:
                    c7:40:f9:4a:4e:86:0c:95:1f:2e:44:88:76:fe:3a:
                    f1:24:6a:24:3d:a4:2d:f4:82:23:33:bb:0c:43:ed:
                    57:da:47:58:fa:40:a6:9b:39:da:a1:18:fe:4d:01:
                    51:53:93:20:80:1e:d5:1a:82:dd:e5:7e:51:23:c6:
                    a5:14:e5:3c:63:10:56:d0:af:a2:48:1b:90:b8:02:
                    a8:05:c7:e5:9c:ca:81:fb:81:99:25:d9:7e:16:7e:
                    c7:e1:cd:94:2d:0a:7b:c8:4e:a5:ed:84:e3:20:94:
                    8f:45:c7:71:85:f8:9f:29:fd:6e:e1:2b:da:64:24:
                    ec:95:4b:e5:62:d7:ce:9b:78:a2:53:66:40:a0:94:
                    05:70:c1:c2:4b:37:9e:3a:57:d8:e1:15:cb:b0:4f:
                    08:d2:d9:21:14:ee:04:46:32:74:95:ed:e4:22:02:
                    ef:aa:90:d6:58:9d:29:72:4f:72:e0:86:b9:bb:a0:
                    67:13
                Exponent: 65537 (0x10001)
        Attributes:
            Requested Extensions:
                X509v3 Subject Alternative Name:
                    DNS:ipa-quincy.domain.com
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        16:3d:8c:87:c1:de:ca:81:e8:04:29:de:06:33:3e:20:06:7d:
        b6:1f:46:d3:64:c8:04:49:29:2c:7b:49:c8:06:5b:2d:8e:97:
        67:ad:6d:e0:13:ba:79:63:cb:b7:4a:23:9e:22:54:b2:7c:a9:
        03:39:81:97:0b:66:86:bb:c1:7f:98:7d:a4:e8:9e:17:54:7d:
        27:88:a7:1d:8b:fa:74:21:90:70:ad:e9:62:37:ab:2b:a5:b6:
        36:ff:43:28:90:74:69:ab:37:ec:b5:30:7f:f1:ef:64:29:a9:
        25:8b:3b:4d:22:38:ae:de:88:f3:c3:07:9f:41:1a:f1:ff:99:
        a7:a0:71:1d:cb:dc:d2:5e:e9:1b:b0:6a:b0:dd:08:23:65:0d:
        00:0f:f7:52:5f:f9:72:dd:1d:73:ec:ae:f0:8b:eb:6f:51:5e:
        7e:00:d3:c0:70:41:f1:c3:8f:5a:d7:3b:4b:96:ea:08:03:6c:
        2b:fc:2f:a8:a5:ba:43:98:81:ef:3b:7b:dc:92:ff:cb:b2:5e:
        47:5c:c2:62:a3:28:75:2b:82:83:0f:f9:f3:b9:5d:e7:3a:16:
        41:b2:f4:d2:88:95:62:34:46:bd:49:42:f4:24:6b:59:e9:ce:
        ec:80:c5:95:5e:03:82:16:ea:c2:7b:2b:1e:37:9a:37:e1:09:
        b4:58:a1:58
-----BEGIN CERTIFICATE REQUEST-----
MIICnDCCAYQCAQAwIjEgMB4GA1UEAwwXaXBhLXF1aW5jeS5nb2hpbHRvbi5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicvVPEf5BO/IK7qmXkj1 
P11/ceeh4uPjebpmY7NN7ZuGrZKyJ3Zs27UgautRq4gelBFdPaWsLftSz3d6 9cp
DQIeZCKFZS3oocdA UpOhgyVHy5EiHb OvEkaiQ9pC30giMzuwxD7VfaR1j6QKab
OdqhGP5NAVFTkyCAHtUagt3lflEjxqUU5TxjEFbQr6JIG5C4AqgFx WcyoH7gZkl
2X4WfsfhzZQtCnvITqXthOMglI9Fx3GF J8p/W7hK9pkJOyVS Vi186beKJTZkCg
lAVwwcJLN546V9jhFcuwTwjS2SEU7gRGMnSV7eQiAu qkNZYnSlyT3Lghrm7oGcT
AgMBAAGgNTAzBgkqhkiG9w0BCQ4xJjAkMCIGA1UdEQQbMBmCF2lwYS1xdWluY3ku
Z29oaWx0b24uY29tMA0GCSqGSIb3DQEBCwUAA4IBAQAWPYyHwd7KgegEKd4GMz4g
Bn22H0bTZMgESSkse0nIBlstjpdnrW3gE7p5Y8u3SiOeIlSyfKkDOYGXC2aGu8F/
mH2k6J4XVH0niKcdi/p0IZBwreliN6srpbY2/0MokHRpqzfstTB/8e9kKakliztN
Ijiu3ojzwwefQRrx/5mnoHEdy9zSXukbsGqw3QgjZQ0AD/dSX/ly3R1z7K7wi tv
UV5 ANPAcEHxw49a1ztLluoIA2wr/C opbpDmIHvO3vckv/Lsl5HXMJioyh1K4KD
D/nzuV3nOhZBsvTSiJViNEa9SUL0JGtZ6c7sgMWVXgOCFurCeyseN5o34Qm0WKFY
-----END CERTIFICATE REQUEST-----

ldez · 2024-05-05T17:52:28Z

ldez
May 5, 2024
Maintainer

Hello,

I can see several possibilities but the main one is a problem with your hook.

FYI, "DST Root CA X3" is deprecated and LE is currently removing it.

https://community.letsencrypt.org/t/deploying-lets-encrypts-new-issuance-chains/216486

6 replies

ldez May 5, 2024
Maintainer

The problem is that the message context canceled is only possible in 3 situations:

An exit of the command (ctrl C)
a timeout (but in this context the message should contain something like "deadline exceeded")
the problem during the run of the hook.

kevdogg May 5, 2024
Author

Well that's why I'm posting to try to see what context canceled actually means since it doesn't generate helpful output.

So I just eliminated the run-hook for now, and I'm still getting the same error.
In terms of timeout -- unlikely since command fails nearly instantaneously.

That leaves possibility #1 - exit of the command (which I'm not hitting Ctrl-C).

Here is my testing command:

LEGO_DEBUG_CLIENT_VERBOSE_ERROR=1 [email protected] CF_API_KEY=xxx CLOUDFLARE_HTTP_TIMEOUT=30 /usr/bin/lego --email "[email protected]" --accept-tos --dns cloudflare --dns.resolvers "9.9.9.9:53" --csr httpd-csr.der run --preferred-chain "ISRG Root X1"

I've verified the CLOUDFLARE_EMAIL and CLOUDFLARE_API_KEY are indeed the values (even cut and pasted these in).

Do you have any other possibilities that would generate this context error?
Here is my lego version:

# lego --version
lego version dev linux/amd64

ldez May 5, 2024
Maintainer

Here is my lego version:
# lego --version
lego version dev linux/amd64

dev is not a real version 😄

Can you use an official version?

kevdogg May 5, 2024
Author

Looked into into. I'm running Fedora. Apparently I have 4.4.0-8.fc37 installed although its weird it doesn't show up on the command line as such.

ldez May 6, 2024
Maintainer

First, you can update to the latest stable version v4.16.1. (v4.4.0 is from 2021)

I think the problem is related to your environment, there is something that interacts with lego.

Can you provide full logs?

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Context canceled when trying to obtain a cert. #2172

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 1 comment 6 replies

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Select a reply

Context canceled when trying to obtain a cert. #2172

kevdogg May 5, 2024

Replies: 1 comment · 6 replies

ldez May 5, 2024 Maintainer

ldez May 5, 2024 Maintainer

kevdogg May 5, 2024 Author

ldez May 5, 2024 Maintainer

kevdogg May 5, 2024 Author

ldez May 6, 2024 Maintainer

kevdogg
May 5, 2024

Replies: 1 comment 6 replies

ldez
May 5, 2024
Maintainer

ldez May 5, 2024
Maintainer

kevdogg May 5, 2024
Author

ldez May 5, 2024
Maintainer

kevdogg May 5, 2024
Author

ldez May 6, 2024
Maintainer