# Letsencrypt HTTP challenge stuck on stage "Testing certificate renew..."

**URL:** <https://community.traefik.io/t/letsencrypt-http-challenge-stuck-on-stage-testing-certificate-renew/21116>\
**Category:** Traefik v2\
**Tags:** letsencrypt-acme\
**Created:** [January 18, 2024, 12:36am UTC](https://community.traefik.io/t/letsencrypt-http-challenge-stuck-on-stage-testing-certificate-renew/21116 "2024-01-18T00:36:18Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![JonoYang](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/jonoyang/32/8114_2.png) [@JonoYang](https://community.traefik.io/u/JonoYang)\
**Post date:** [January 18, 2024, 12:36am UTC](https://community.traefik.io/t/letsencrypt-http-challenge-stuck-on-stage-testing-certificate-renew/21116/1 "2024-01-18T00:36:18Z")

</div>

I'm trying to get traefik to generate certs using the HTTP challenge, but when I run my traefik service, it seems to be stuck on this step:

> traefik | time="2024-01-18T00:22:20Z" level=info msg="Testing certificate renew..." providerName=resolver.acme ACME CA="[https://acme-staging-v02.api.letsencrypt.org/directory](https://acme-staging-v02.api.letsencrypt.org/directory)"

I'm not entirely sure what I am missing. Did I forget a route somewhere?

This is `docker-compose_traefik.yml`, that I use to run the traefik service:

```auto
version: "3.7"

services:
  traefik:
    image: "traefik:v2.10"
    container_name: "traefik"
    hostname: "traefik"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "./traefik.yml:/traefik.yml:ro"
      - "/letsencrypt/acme.json:/letsencrypt/acme.json"

networks:
  default:
    external:
      name: purldb

```

This is `traefik.yml`:

```auto
## STATIC CONFIGURATION
log:
  level: INFO

api:
  insecure: false
  dashboard: false

entryPoints:
  web:
    address: ":80"
  websecure:
    address: ":443"

certificatesResolvers:
  resolver:
    acme:
      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
      email: infra@nexb.com
      storage: /letsencrypt/acme.json
      httpChallenge:
        # used during the challenge
        entryPoint: web

providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false

```

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [January 18, 2024, 9:15pm UTC](https://community.traefik.io/t/letsencrypt-http-challenge-stuck-on-stage-testing-certificate-renew/21116/2 "2024-01-18T21:15:24Z")

</div>

Why do you think it's stuck? In the configuration you shared there is not a single domain name, so no TLS certs will be created.

---

<div class="post-metadata">

**Author:** ![JonoYang](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/jonoyang/32/8114_2.png) [@JonoYang](https://community.traefik.io/u/JonoYang)\
**Post date:** [January 25, 2024, 1:55am UTC](https://community.traefik.io/t/letsencrypt-http-challenge-stuck-on-stage-testing-certificate-renew/21116/3 "2024-01-25T01:55:17Z")

</div>

Good catch. In my other docker-compose.yml, I needed to add these to the labels of my nginx service:

```auto
      - "traefik.http.routers.purldb_https.tls=true"
      - "traefik.http.routers.purldb_https.tls.certresolver=resolver"

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/containo/original/2X/b/bd81ebdb578656e76e56ff3cc3eed021d3ba132d.png) [@system](https://community.traefik.io/u/system)\
**Post date:** [January 28, 2024, 1:55am UTC](https://community.traefik.io/t/letsencrypt-http-challenge-stuck-on-stage-testing-certificate-renew/21116/4 "2024-01-28T01:55:56Z")

</div>

Closed on January 28, 2024, 1:55am UTC

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.