Repository navigation
Cannot finish setup #243
Description
I followed the setup instructions. I had to change the docker-compose.yml and change network mode to use bouldernet for pkimetal. I have generated the root and second certificate.
Now at requesting a certifcate for the website i get this error.
Bolder log:
boulder-1 | 2026-07-21T13:39:38.166855+00:00Z sfe[377]: 6 sfe ZtKhNA Debug server listening on :8015
boulder-1 | 2026-07-21T13:39:38.166946+00:00Z sfe[377]: 6 sfe 92lc6w [AUDIT] Process starting JSON={"Command":"sfe","BuildID":"v0.20260309.0 +5c3a8315","BuildTime":"Thu Apr 9 16:56:22 UTC 2026","GoVersion":"go1.25.8","BuildHost":"labca-v26.04"}
boulder-1 | 2026-07-21T13:39:38.174563+00:00Z sfe[377]: 6 sfe Gk0Gqw Server running, listening on 0.0.0.0:4003....
boulder-1 | 2026-07-21T13:39:38.277176+00:00Z boulder-wfe2[385]: 6 boulder-wfe2 U3fC3Q Debug server listening on :8013
boulder-1 | 2026-07-21T13:39:38.279586+00:00Z boulder-wfe2[385]: 6 boulder-wfe2 BLKsLA [AUDIT] Process starting JSON={"Command":"boulder-wfe2","BuildID":"v0.20260309.0 +5c3a8315","BuildTime":"Thu Apr 9 16:56:22 UTC 2026","GoVersion":"go1.25.8","BuildHost":"labca-v26.04"}
boulder-1 | 2026-07-21T13:39:38.300581+00:00Z boulder-wfe2[385]: 6 boulder-wfe2 6CcIMw loading identifier policy, sha256: 2eaa7449ff894b3616e5fe5502088a8cc78714dee595a7c7d31948521b5802ce
boulder-1 | 2026-07-21T13:39:38.305036+00:00Z boulder-wfe2[385]: 6 boulder-wfe2 7351yQ Server running, listening on :4001....
boulder-1 | 2026-07-21T13:39:38.308287+00:00Z boulder-wfe2[385]: 6 boulder-wfe2 BMBqTQ TLS server listening on :4431
boulder-1 | 2026-07-21T13:40:07.163455+00:00Z boulder-wfe2[385]: 6 boulder-wfe2 HRU3tg POST /acme/new-acct 0 500 46 0.0.0.0 JSON={"InternalErrors":["internal error while checking JWK: rpc error: code = Unavailable desc = no children to pick from"],"Error":"500 :: serverInternal :: Unable to validate JWS","ua":"CertbotACMEClient/5.5.0 (certbot; Ubuntu 24.04.4 LTS) Authenticator/webroot Installer/None (certonly; flags: n) Py/3.10.20"}
boulder-1 | 2026-07-21T14:04:24.681756+00:00Z boulder-wfe2[385]: 6 boulder-wfe2 ATtcog POST /acme/new-acct 0 500 2 0.0.0.0 JSON={"InternalErrors":["internal error while checking JWK: rpc error: code = Unavailable desc = no children to pick from"],"Error":"500 :: serverInternal :: Unable to validate JWS","ua":"CertbotACMEClient/5.5.0 (certbot; Ubuntu 24.04.4 LTS) Authenticator/webroot Installer/None (certonly; flags: n) Py/3.10.20"}
Activity
TerAnYu commentedon Aug 26, 2026
The fix from #236 got the service running, but the same error persists. No fix found yet.
St0rmEye-GH commentedon Aug 30, 2026
i have the same problem.
I'm running labca on a vm in proxmox sucessfully. Due to fewer used resources i wanted to run labca via a docker on unraid.
i added the network code to use br0 with a fixed ip and a given mac.
i changed the volumes to a location unter /mnt/user/appdata/labca where there is a linux fs and not fat32.
i added bouldernet to bpkimetal and boulder connected.
i restored a backup of the proxmox-vm in the docker-labca. But now, when i want to renew the proxmox certificate i got the same no childran to pick from error:
/acme/new-order 0 500 0 ::ffff:192.168.a.b JSON={"InternalErrors":["calling SA.GetRegistration: rpc error: code = Unavailable desc = no children to pick from","Error retrieving account.
the error message doesn't help me and i'm out of ideas. For now i pause the attempt to run labca via unraid docker.