Context canceled when trying to obtain a cert.

[kevdogg]

I'm trying to do something really easy (or so I though) but I'm not able to run lego to obtain a cert:

[email protected] CLOUDFLARE_API_KEY=xxxx /usr/bin/lego --email "[[email protected]](mailto:[email protected])" --accept-tos --dns cloudflare --dns.resolvers "9.9.9.9:53" --csr httpd-csr.der run --preferred-chain "DST Root CA X3" --run-hook install.sh

I'm receiving this error:

2024/05/05 12:32:32 [INFO] [ipa-quincy.domain.com] acme: Obtaining bundled SAN certificate given a CSR
2024/05/05 12:32:32 Could not obtain certificates:
	context canceled

I'm not sure what context canceled means.

For reference here is my CSR

#openssl req -text -in httpd-csr.der
Certificate Request:
    Data:
        Version: 1 (0x0)
        Subject: CN = ipa-quincy.domain.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:f5:4f:11:fe:41:3b:f2:0a:ee:a9:97:92:
                    3d:7e:3f:5d:7f:71:e7:a1:e2:e3:e3:79:ba:66:63:
                    b3:4d:ed:9b:86:ad:92:b2:27:76:6c:db:b5:20:6a:
                    eb:51:ab:88:1e:94:11:5d:3d:a5:ac:2d:fb:52:cf:
                    77:7a:fb:d7:29:0d:02:1e:64:22:85:65:2d:e8:a1:
                    c7:40:f9:4a:4e:86:0c:95:1f:2e:44:88:76:fe:3a:
                    f1:24:6a:24:3d:a4:2d:f4:82:23:33:bb:0c:43:ed:
                    57:da:47:58:fa:40:a6:9b:39:da:a1:18:fe:4d:01:
                    51:53:93:20:80:1e:d5:1a:82:dd:e5:7e:51:23:c6:
                    a5:14:e5:3c:63:10:56:d0:af:a2:48:1b:90:b8:02:
                    a8:05:c7:e5:9c:ca:81:fb:81:99:25:d9:7e:16:7e:
                    c7:e1:cd:94:2d:0a:7b:c8:4e:a5:ed:84:e3:20:94:
                    8f:45:c7:71:85:f8:9f:29:fd:6e:e1:2b:da:64:24:
                    ec:95:4b:e5:62:d7:ce:9b:78:a2:53:66:40:a0:94:
                    05:70:c1:c2:4b:37:9e:3a:57:d8:e1:15:cb:b0:4f:
                    08:d2:d9:21:14:ee:04:46:32:74:95:ed:e4:22:02:
                    ef:aa:90:d6:58:9d:29:72:4f:72:e0:86:b9:bb:a0:
                    67:13
                Exponent: 65537 (0x10001)
        Attributes:
            Requested Extensions:
                X509v3 Subject Alternative Name:
                    DNS:ipa-quincy.domain.com
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        16:3d:8c:87:c1:de:ca:81:e8:04:29:de:06:33:3e:20:06:7d:
        b6:1f:46:d3:64:c8:04:49:29:2c:7b:49:c8:06:5b:2d:8e:97:
        67:ad:6d:e0:13:ba:79:63:cb:b7:4a:23:9e:22:54:b2:7c:a9:
        03:39:81:97:0b:66:86:bb:c1:7f:98:7d:a4:e8:9e:17:54:7d:
        27:88:a7:1d:8b:fa:74:21:90:70:ad:e9:62:37:ab:2b:a5:b6:
        36:ff:43:28:90:74:69:ab:37:ec:b5:30:7f:f1:ef:64:29:a9:
        25:8b:3b:4d:22:38:ae:de:88:f3:c3:07:9f:41:1a:f1:ff:99:
        a7:a0:71:1d:cb:dc:d2:5e:e9:1b:b0:6a:b0:dd:08:23:65:0d:
        00:0f:f7:52:5f:f9:72:dd:1d:73:ec:ae:f0:8b:eb:6f:51:5e:
        7e:00:d3:c0:70:41:f1:c3:8f:5a:d7:3b:4b:96:ea:08:03:6c:
        2b:fc:2f:a8:a5:ba:43:98:81:ef:3b:7b:dc:92:ff:cb:b2:5e:
        47:5c:c2:62:a3:28:75:2b:82:83:0f:f9:f3:b9:5d:e7:3a:16:
        41:b2:f4:d2:88:95:62:34:46:bd:49:42:f4:24:6b:59:e9:ce:
        ec:80:c5:95:5e:03:82:16:ea:c2:7b:2b:1e:37:9a:37:e1:09:
        b4:58:a1:58
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

[ldez]

Hello,

I can see several possibilities but the main one is a problem with your hook.

FYI, "DST Root CA X3" is deprecated and LE is currently removing it.

https://community.letsencrypt.org/t/deploying-lets-encrypts-new-issuance-chains/216486

[ldez]

The problem is that the message context canceled is only possible in 3 situations:

• An exit of the command (ctrl+C)
• a timeout (but in this context the message should contain something like "deadline exceeded")
• the problem during the run of the hook.

[kevdogg]

Well that's why I'm posting to try to see what context canceled actually means since it doesn't generate helpful output.

So I just eliminated the run-hook for now, and I'm still getting the same error.
In terms of timeout -- unlikely since command fails nearly instantaneously.

That leaves possibility #1 - exit of the command (which I'm not hitting Ctrl-C).

Here is my testing command:

LEGO_DEBUG_CLIENT_VERBOSE_ERROR=1 [email protected] CF_API_KEY=xxx CLOUDFLARE_HTTP_TIMEOUT=30 /usr/bin/lego --email "[email protected]" --accept-tos --dns cloudflare --dns.resolvers "9.9.9.9:53" --csr httpd-csr.der run --preferred-chain "ISRG Root X1"

I've verified the CLOUDFLARE_EMAIL and CLOUDFLARE_API_KEY are indeed the values (even cut and pasted these in).

Do you have any other possibilities that would generate this context error?
Here is my lego version:

# lego --version
lego version dev linux/amd64

[ldez]

Here is my lego version:

# lego --version
lego version dev linux/amd64

dev is not a real version 😄

Can you use an official version?

[kevdogg]

Looked into into. I'm running Fedora. Apparently I have 4.4.0-8.fc37 installed although its weird it doesn't show up on the command line as such.

[ldez]

First, you can update to the latest stable version v4.16.1. (v4.4.0 is from 2021)

I think the problem is related to your environment, there is something that interacts with lego.

Can you provide full logs?