{"action":"opened","issue":{"url":"https://api.github.com/repos/kuba/simp_le/issues/17","labels_url":"https://api.github.com/repos/kuba/simp_le/issues/17/labels{/name}","comments_url":"https://api.github.com/repos/kuba/simp_le/issues/17/comments","events_url":"https://api.github.com/repos/kuba/simp_le/issues/17/events","html_url":"https://github.com/kuba/simp_le/issues/17","id":120266713,"number":17,"title":"Infinite connection loop while generating new (not renewed) cert","user":{"login":"TheReverend403","id":2728714,"avatar_url":"https://avatars.githubusercontent.com/u/2728714?v=3","gravatar_id":"","url":"https://api.github.com/users/TheReverend403","html_url":"https://github.com/TheReverend403","followers_url":"https://api.github.com/users/TheReverend403/followers","following_url":"https://api.github.com/users/TheReverend403/following{/other_user}","gists_url":"https://api.github.com/users/TheReverend403/gists{/gist_id}","starred_url":"https://api.github.com/users/TheReverend403/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheReverend403/subscriptions","organizations_url":"https://api.github.com/users/TheReverend403/orgs","repos_url":"https://api.github.com/users/TheReverend403/repos","events_url":"https://api.github.com/users/TheReverend403/events{/privacy}","received_events_url":"https://api.github.com/users/TheReverend403/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-12-03T20:48:19Z","updated_at":"2015-12-03T20:48:19Z","closed_at":null,"body":"````\r\n2015-12-03 15:39:02 [INFO] Creating certificate for gitlab.notoriousdev.com\r\n2015-12-03 15:39:02 [INFO] Running simp_le from /etc/ssl/letsencrypt/certs/gitlab.notoriousdev.com as: simp_le --cert_key_size 2048 --email redacted@notoriousdev.com --server https://acme-v01.api.letsencrypt.org/directory --default_root /etc/letsencrypt/webrootauth -f key.pem -f cert.pem -f chain.pem -f fullchain.pem -d gitlab.notoriousdev.com -d gitlab.ndev.me\r\n2015-12-03 20:39:02,972:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:03,945:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:04,093:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:04,284:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:04,514:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:04,765:INFO:requests.packages.urllib3.connectionpool:207: Starting new HTTP connection (1): gitlab.ndev.me\r\n2015-12-03 20:39:04,921:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): gitlab.notoriousdev.com\r\n2015-12-03 20:39:05,483:WARNING:simp_le:801: gitlab.ndev.me was not successfully verified by the client. CA is likely to fail as well!\r\n2015-12-03 20:39:05,499:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:05,709:INFO:requests.packages.urllib3.connectionpool:207: Starting new HTTP connection (1): gitlab.notoriousdev.com\r\n2015-12-03 20:39:05,797:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): gitlab.notoriousdev.com\r\n2015-12-03 20:39:06,309:WARNING:simp_le:801: gitlab.notoriousdev.com was not successfully verified by the client. CA is likely to fail as well!\r\n2015-12-03 20:39:06,322:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:06,760:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:06,881:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:11,030:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:11,182:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:15,333:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:15,470:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:19,737:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\n2015-12-03 20:39:19,895:INFO:requests.packages.urllib3.connectionpool:756: Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org\r\nTraceback (most recent call last):\r\n  File \"/opt/simp_le/venv/bin/simp_le\", line 9, in <module>\r\n    load_entry_point('simp-le', 'console_scripts', 'simp_le')()\r\n  File \"/opt/simp_le/simp_le.py\", line 871, in main\r\n    raise SystemExit(_main(cli_args))\r\n  File \"/opt/simp_le/simp_le.py\", line 864, in _main\r\n    _new_data(args)\r\n  File \"/opt/simp_le/simp_le.py\", line 809, in _new_data\r\n    certr, _ = client.poll_and_request_issuance(csr, authorizations.values())\r\n  File \"/opt/simp_le/venv/local/lib/python2.7/site-packages/acme/client.py\", line 366, in poll_and_request_issuance\r\n    time.sleep(seconds)\r\nKeyboardInterrupt\r\n````\r\n\r\nIn the interest of transparency, I am using a wrapper script, but this shouldn't affect anything as the only thing this script does is generate a simp_le command based on variables and runs it. The final command that gets ran is printed in the log.\r\n\r\nThis problem only started a few hours into the public beta launch today, simp_le was working perfectly before that. I've also tested it under the following conditions and everything works as expected.\r\n\r\n* Existing cert that doesn't need renewing. (skips)\r\n* Attempting to generate a new cert while rate limited (fails, as expected, but doesn't get stuck in a connection loop).\r\n\r\nIt's only when generating a completely new cert for a domain that hasn't had a cert with Let's Encrypt yet that this problem occurs.\r\n\r\nLet me know if there's more info I could provide."}}