Kong Acme plugin: certificate doesn't renew

#1

Hey there,

I’m using the Kong Acme plugin to automatically request and renew certificates. It worked good initially (the certificate got requested), but it hasn’t renewed the certificate. I’m seeing this in the logs:

[error] 24#0: *27883520 lua entry thread aborted: runtime error: /usr/local/share/lua/5.1/resty/openssl/x509/init.lua:278: attempt to index local 'self' (a nil value)
stack traceback:
coroutine 0:
        /usr/local/share/lua/5.1/resty/openssl/x509/init.lua: in function 'get_not_after'
        /usr/local/share/lua/5.1/kong/plugins/acme/client.lua:287: in function 'renew_certificate_storage'
        /usr/local/share/lua/5.1/kong/plugins/acme/client.lua:327: in function </usr/local/share/lua/5.1/kong/plugins/acme/client.lua:311>, context: ngx.timer

Anybody using the Acme plugin and encountered this? What’s the solution?

I’m using Kong storage for the plugin.

Thanks!
Frans

#2

Hi @frans , this seems to be a bug prior to plugin version 0.2.9 when used with kong storage.
Updating Kong to later than 2.1.1 or the plugin later than 0.2.9 will fix the issue.