-
-
Notifications
You must be signed in to change notification settings - Fork 38
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Option to disable IPV6 #157
Comments
simp_le defers to the python acme library for lower level networking stuff like this, and I'd expect this to bottom out at still-lower-level libraries by default -- I haven't looked but the sane way to do this seems like it would be to just let the HTTP libraries do their thing. If those libraries are deciding to connect via ipv6 when the host they're on doesn't actually support it, I suspect there's something wonky going on with your network config. Does the container think it has an ipv6 address? That said, if there are python-acme options to give the caller more control over this, I wouldn't be opposed to accepting a patch that exposed them via cli flags. |
Thanks for the fast reply. |
Sadly docker containers do not support access to remote servers via ipv6 out of the box.
For an example on how many things to do and think about in order to enable ipv6 access to the internet see https://medium.com/@skleeschulte/how-to-enable-ipv6-for-docker-containers-on-ubuntu-18-04-c68394a219a2
The Let's Encrypt server names (e.g. r3.o.lencr.org) are configured and accessible with either ipv4 or ipv6 addresses.
simp_le seems to always use the ipv6 addresses.
This results in problems when creating or renewing certificates from within docker containers in case they cannot access ipv6 servers.
I ran into this problem using https:/nginx-proxy/nginx-proxy.
Is there an opportunity to force the use of ipv4 adressess when accessing the Let's Encrypt servers? it woud be great to make this available via command line argument and ENV variable. Command line arg should overwrite ENV var then.
The text was updated successfully, but these errors were encountered: