As a follow up from Retrieve wildcard certificate for subdomain with TransIP as DNS provider, I am trying the same, but now for CNAME records. The CNAME records point to Dynu.com addresses, which do resolve into an IP address.
I extended to DNS resolvers with the Dynu[dot]com addresses:
--acme.dnsChallenge.resolvers="ns0.transip.net,ns1.transip.nl,ns2.transip.eu,ns1.dynu.com,ns2.dynu.com,ns3.dynu.com,ns4.dynu.com,ns5.dynu.com,1.1.1.1,8.8.8.8"
But once I bring it up, the log says:
time="2019-07-23T11:14:54Z" level=info msg="Retrieved ACME certificates",
time="2019-07-23T11:14:54Z" level=error msg="Error getting ACME certificate for domain [\"*.mark.dev.mobilea.nl\"]: cannot obtain certificates: acme: Error -> One or more domains had a problem:\n[*.mark.dev.mobilea.nl] [*.mark.dev.mobilea.nl] acme: error presenting token: transip: error for mark.dev.mobilea.nl in Present: SOAP Fault 102: One or more domains could not be found.\n",
time="2019-07-23T11:14:54Z" level=info msg="legolog: [WARN] [*.mark.dev.mobilea.nl] acme: error cleaning up: transip: error for mark-mobilea.dynu.com. in CleanUp: SOAP Fault 102: One or more domains could not be found. ",
time="2019-07-23T11:14:54Z" level=info msg="legolog: [INFO] [*.mark.dev.mobilea.nl] acme: Cleaning DNS-01 challenge",
time="2019-07-23T11:14:51Z" level=info msg="legolog: [INFO] [*.mark.dev.mobilea.nl] acme: Preparing to solve DNS-01",
time="2019-07-23T11:14:51Z" level=info msg="legolog: [INFO] [*.mark.dev.mobilea.nl] acme: use dns-01 solver",
time="2019-07-23T11:14:51Z" level=info msg="legolog: [INFO] [*.mark.dev.mobilea.nl] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/qQz22TG7sdSZzDbWfN4tnfiUH-vQBPqrPazdHUN0O4w",
time="2019-07-23T11:14:51Z" level=info msg="legolog: [INFO] [*.mark.dev.mobilea.nl] acme: Obtaining bundled SAN certificate",
time="2019-07-23T11:14:51Z" level=debug msg="Loading ACME certificates [*.mark.dev.mobilea.nl]...",
time="2019-07-23T11:14:51Z" level=info msg="Retrieving ACME certificates...",
time="2019-07-23T11:14:50Z" level=debug msg="Building ACME client...",
time="2019-07-23T11:14:49Z" level=info msg="Starting ACME renew job...",
�time="2019-07-23T11:14:49Z" level=debug msg="Global configuration loaded {\"LifeCycle\":{\"RequestAcceptGraceTimeout\":0,\"GraceTimeOut\":10000000000},\"GraceTimeOut\":0,\"Debug\":false,\"CheckNewVersion\":true,\"SendAnonymousUsage\":false,\"AccessLogsFile\":\"\",\"AccessLog\":{\"format\":\"common\"},\"TraefikLogsFile\":\"\",\"TraefikLog\":null,\"Tracing\":null,\"LogLevel\":\"DEBUG\",\"EntryPoints\":{\"http\":{\"Address\":\":80\",\"TLS\":null,\"Redirect\":null,\"Auth\":null,\"WhitelistSourceRange\":null,\"WhiteList\":null,\"Compress\":false,\"ProxyProtocol\":null,\"ForwardedHeaders\":{\"Insecure\":true,\"TrustedIPs\":null}},\"https\":{\"Address\":\":443\",\"TLS\":{\"MinVersion\":\"\",\"CipherSuites\":null,\"Certificates\":[],\"ClientCAFiles\":null,\"ClientCA\":{\"Files\":null,\"Optional\":false},\"DefaultCertificate\":null,\"SniStrict\":false},\"Redirect\":null,\"Auth\":null,\"WhitelistSourceRange\":null,\"WhiteList\":null,\"Compress\":false,\"ProxyProtocol\":null,\"ForwardedHeaders\":{\"Insecure\":true,\"TrustedIPs\":null}},\"traefik\":{\"Address\":\":8080\",\"TLS\":null,\"Redirect\":null,\"Auth\":null,\"WhitelistSourceRange\":null,\"WhiteList\":null,\"Compress\":false,\"ProxyProtocol\":null,\"ForwardedHeaders\":{\"Insecure\":true,\"TrustedIPs\":null}}},\"Cluster\":{\"Node\":\"1df9c927-6bfd-419d-8e9a-d17f0a3b9c46\",\"Store\":{\"Store\":{},\"Prefix\":\"traefik\"}},\"Constraints\":[\"tag==traefik-public\"],\"ACME\":{\"Email\":\"mark@mobilea.nl\",\"Domains\":[{\"Main\":\"*.mark.dev.mobilea.nl\",\"SANs\":null}],\"Storage\":\"traefik/acme/account\",\"StorageFile\":\"\",\"OnDemand\":false,\"OnHostRule\":false,\"CAServer\":\"https://acme-v02.api.letsencrypt.org/directory\",\"EntryPoint\":\"https\",\"KeyType\":\"\",\"DNSChallenge\":{\"Provider\":\"transip\",\"DelayBeforeCheck\":0,\"Resolvers\":[\"ns0.transip.net\",\"ns1.transip.nl\",\"ns2.transip.eu\",\"ns1.dynu.com\",\"ns2.dynu.com\",\"ns3.dynu.com\",\"ns4.dynu.com\",\"ns5.dynu.com\",\"1.1.1.1\",\"8.8.8.8\"],\"DisablePropagationCheck\":false},\"HTTPChallenge\":null,\"TLSChallenge\":null,\"DNSProvider\":\"\",\"DelayDontCheckDNS\":0,\"ACMELogging\":true,\"OverrideCertificates\":false,\"TLSConfig\":null},\"DefaultEntryPoints\":[\"http\"],\"ProvidersThrottleDuration\":2000000000,\"MaxIdleConnsPerHost\":200,\"IdleTimeout\":0,\"InsecureSkipVerify\":false,\"RootCAs\":null,\"Retry\":null,\"HealthCheck\":{\"Interval\":30000000000},\"RespondingTimeouts\":null,\"ForwardingTimeouts\":null,\"AllowMinWeightZero\":false,\"KeepTrailingSlash\":false,\"Web\":null,\"Docker\":{\"Watch\":true,\"Filename\":\"\",\"Constraints\":null,\"Trace\":false,\"TemplateVersion\":2,\"DebugLogGeneratedTemplate\":false,\"Endpoint\":\"unix:///var/run/docker.sock\",\"Domain\":\"\",\"TLS\":null,\"ExposedByDefault\":false,\"UseBindPortIP\":false,\"SwarmMode\":true,\"Network\":\"\",\"SwarmModeRefreshSeconds\":15},\"File\":null,\"Marathon\":null,\"Consul\":{\"Watch\":true,\"Filename\":\"\",\"Constraints\":[],\"Trace\":false,\"TemplateVersion\":0,\"DebugLogGeneratedTemplate\":false,\"Endpoint\":\"consul-leader:8500\",\"Prefix\":\"traefik\",\"TLS\":null,\"Username\":\"\",\"Password\":\"\"},\"ConsulCatalog\":null,\"Etcd\":null,\"Zookeeper\":null,\"Boltdb\":null,\"Kubernetes\":null,\"Mesos\":null,\"Eureka\":null,\"ECS\":null,\"Rancher\":null,\"DynamoDB\":null,\"ServiceFabric\":null,\"Rest\":null,\"API\":{\"EntryPoint\":\"traefik\",\"Dashboard\":true,\"Debug\":false,\"CurrentConfigurations\":null,\"Statistics\":null},\"Metrics\":null,\"Ping\":null,\"HostResolver\":null}"
Is there something I can do to see/debug these SOAP errors? I turned the experimental features on by setting an environment variable on Traefik with LEGO_EXPERIMENTAL_CNAME_SUPPORT=true within the docker.compose.yml, which should be sufficient to set the environment variable for Traefik: https://github.com/containous/traefik/blob/master/vendor/github.com/go-acme/lego/challenge/dns01/dns_challenge.go#L179