Time limit exceeded while trying to create new SSL certificate using ACME with EAB authentication

Traefik Traefik v2
1

I am trying to create a new SSL certificate using ACME with EAB authentication.
It seems that the ACME server is taking too long to respond to the request (see attached log below).

traefik  | time="2024-03-05T10:30:55Z" level=debug msg="legolog: [INFO] [xxx.example.com] AuthURL: https://acme.sectigo.com/v2/OV/authz/yyy"
traefik  | time="2024-03-05T10:30:55Z" level=debug msg="legolog: [INFO] [xxx.example.com] acme: authorization already valid; skipping challenge"
traefik  | time="2024-03-05T10:30:55Z" level=debug msg="legolog: [INFO] [xxx.example.com] acme: Validations succeeded; requesting certificates"
traefik  | time="2024-03-05T10:31:00Z" level=debug msg="legolog: [INFO] Wait for certificate [**timeout: 30s**, interval: 500ms]"
traefik  | time="2024-03-05T10:31:31Z" level=error msg="Unable to obtain ACME certificate for domains \"xxx.example.com\": unable to generate a certificate for the domains [xxx.example.com]: error: one or more domains had a problem:\n[xxx.example.com] time limit exceeded\n" routerName=mlflow-ui@docker rule="Host(`xxx.example.com`)" providerName=sectigo.acme ACME CA="https://acme.sectigo.com/v2/OV"

Shortly after getting this error I receive an email from my certificate provider that the request has been successfully processed.

Is it possible to increase the 30 seconds timeout traefik is waiting for the cert? Hopefully this should solve my current issue.

2

Will it be possible to increase the timeout enforced by Lego? We're still unable to retrieve new certificates due to this problem.

3

You would probably need to open a feature request on Github.

delayBeforeCheck exists, but no delay afterwards.

Note: Before it becomes time-critical, you can always use go-acme or certbot to create the certs manually and use them in Traefik.