[GH-ISSUE #1862] Let's Encrypt: DNS Challenge for Cloudflare not working (conflicting dependencies) #1363

Closed
opened 2026-02-26 07:30:41 +03:00 by kerem · 9 comments
Owner

Originally created by @MBennGit on GitHub (Feb 15, 2022).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1862

Checklist

  • Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
    • Yes
  • Are you sure you're not using someone else's docker image?
    • Yes
  • Have you searched for similar issues (both open and closed)?
    • Yes

Describe the bug
Tried to add a certificate via DNS Challenge for Cloudflare domain. After starting the process, a timeout error appears. If the propagation seconds are set, an error is given hinting at conflicting dependencies with the certbot-dns-cloudflare pip package.

Nginx Proxy Manager Version
v2.9.15

To Reproduce
Steps to reproduce the behavior:

  1. Go to the tab "SSL Certificates"
  2. Click on "Add SSL Certificate"
  3. Enter the domains "*.example.com, example.com"
  4. Select "Use DNS Challenge", Cloudflare, and set API Key
  5. Set Propagation Seconds (450 Seconds) (Optional)

Expected behavior
A SSL Wildcard Certificate is created.

Screenshots

Operating System
Raspberry Pi - Raspbian GNU/Linux 11 (bullseye)
docker-compose version 1.29.2

Additional context

cloudflare-dns.log

Originally created by @MBennGit on GitHub (Feb 15, 2022). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1862 <!-- Are you in the right place? - If you are looking for support on how to get your upstream server forwarding, please consider asking the community on Reddit. - If you are writing code changes to contribute and need to ask about the internals of the software, Gitter is the best place to ask. - If you think you found a bug with NPM (not Nginx, or your upstream server or MySql) then you are in the *right place.* --> **Checklist** - Have you pulled and found the error with `jc21/nginx-proxy-manager:latest` docker image? - Yes - Are you sure you're not using someone else's docker image? - Yes - Have you searched for similar issues (both open and closed)? - Yes **Describe the bug** Tried to add a certificate via DNS Challenge for Cloudflare domain. After starting the process, a timeout error appears. If the propagation seconds are set, an error is given hinting at conflicting dependencies with the `certbot-dns-cloudflare` pip package. **Nginx Proxy Manager Version** v2.9.15 **To Reproduce** Steps to reproduce the behavior: 1. Go to the tab "SSL Certificates" 2. Click on "Add SSL Certificate" 3. Enter the domains "*.example.com, example.com" 4. Select "Use DNS Challenge", Cloudflare, and set API Key 4. Set Propagation Seconds (450 Seconds) (Optional) **Expected behavior** A SSL Wildcard Certificate is created. **Screenshots** <!-- If applicable, add screenshots to help explain your problem. --> **Operating System** Raspberry Pi - Raspbian GNU/Linux 11 (bullseye) docker-compose version 1.29.2 **Additional context** [cloudflare-dns.log](https://github.com/NginxProxyManager/nginx-proxy-manager/files/8075176/cloudflare-dns.log)
kerem 2026-02-26 07:30:41 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@tkjouu commented on GitHub (Feb 17, 2022):

I have the same problem.

<!-- gh-comment-id:1042458881 --> @tkjouu commented on GitHub (Feb 17, 2022): I have the same problem.
Author
Owner

@xstar97 commented on GitHub (Feb 17, 2022):

have you created an api key with dns edit for all zones or a single zone?

have you tried making a new key?

link -> https://dash.cloudflare.com/profile/api-tokens

<!-- gh-comment-id:1043302716 --> @xstar97 commented on GitHub (Feb 17, 2022): have you created an api key with dns edit for all zones or a single zone? have you tried making a new key? link -> https://dash.cloudflare.com/profile/api-tokens
Author
Owner

@jiriteach commented on GitHub (Feb 18, 2022):

Related to #1769 which is an issue we've been tracking now for a while.

<!-- gh-comment-id:1044125411 --> @jiriteach commented on GitHub (Feb 18, 2022): Related to #1769 which is an issue we've been tracking now for a while.
Author
Owner

@MBennGit commented on GitHub (Feb 18, 2022):

have you created an api key with dns edit for all zones or a single zone?

have you tried making a new key?

Yes, created a new key, edit for all zones. Tested the key with the curl command given by cloudflare.

<!-- gh-comment-id:1044288147 --> @MBennGit commented on GitHub (Feb 18, 2022): > have you created an api key with dns edit for all zones or a single zone? > > have you tried making a new key? Yes, created a new key, edit for all zones. Tested the key with the curl command given by cloudflare.
Author
Owner

@MBennGit commented on GitHub (Feb 18, 2022):

Just discovered this after much investigation. Related to #1769

I will test the recommended fixes and report back.

<!-- gh-comment-id:1044292510 --> @MBennGit commented on GitHub (Feb 18, 2022): > Just discovered this after much investigation. Related to #1769 I will test the recommended fixes and report back.
Author
Owner

@MBennGit commented on GitHub (Feb 18, 2022):

As suggested in the issue linked by @Jiriteach I changed my nginx proxy manager version from latest to the previous version 2.9.14 and it worked fine.

version: '3'
services:
  app:
    image: 'jc21/nginx-proxy-manager:2.9.14'
    restart: unless-stopped
    ports:
      - '80:80'
      - '81:81'
      - '443:443'
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt

Let's Encrypt certificates in combination with Cloudflare DNS are being generated now.
Thank You

<!-- gh-comment-id:1045269117 --> @MBennGit commented on GitHub (Feb 18, 2022): As suggested in the issue linked by @Jiriteach I changed my nginx proxy manager version from `latest` to the previous version `2.9.14` and it worked fine. ``` version: '3' services: app: image: 'jc21/nginx-proxy-manager:2.9.14' restart: unless-stopped ports: - '80:80' - '81:81' - '443:443' volumes: - ./data:/data - ./letsencrypt:/etc/letsencrypt ``` Let's Encrypt certificates in combination with Cloudflare DNS are being generated now. Thank You
Author
Owner

@cryd-s commented on GitHub (Mar 22, 2023):

is the latest version now creating the certificates? Cause mine send me an internal error :(

image

image

<!-- gh-comment-id:1479024469 --> @cryd-s commented on GitHub (Mar 22, 2023): is the latest version now creating the certificates? Cause mine send me an internal error :( ![image](https://user-images.githubusercontent.com/47699362/226840534-b94a86f3-d69c-49a0-99a8-d4052a9e2f5f.png) ![image](https://user-images.githubusercontent.com/47699362/226839869-580aca24-cdb4-46ad-a4f5-47b4b6aa3040.png)
Author
Owner

@wildernessfamily commented on GitHub (Jun 21, 2023):

I was having the same problem. I tired about six months ago and received the same error. I had some time this weekend to try to get it up and going. Again, I received the same error. I realized what it was. When you paste in your API key, if you look very careful, prior to the equal sign "=" there is a space. Remove the space and you should be good to go. I zoomed in on @cryd-s image, and it appears to have the same space. Hope that helps :)

<!-- gh-comment-id:1599770115 --> @wildernessfamily commented on GitHub (Jun 21, 2023): I was having the same problem. I tired about six months ago and received the same error. I had some time this weekend to try to get it up and going. Again, I received the same error. I realized what it was. When you paste in your API key, if you look very careful, prior to the equal sign "=" there is a space. Remove the space and you should be good to go. I zoomed in on @cryd-s image, and it appears to have the same space. Hope that helps :)
Author
Owner

@ehtishammubarik commented on GitHub (Nov 24, 2024):

Fish --- such a dumb mistake to ignore BUT thanks @wildernessfamily :)

<!-- gh-comment-id:2495769083 --> @ehtishammubarik commented on GitHub (Nov 24, 2024): Fish --- such a dumb mistake to ignore BUT thanks @wildernessfamily :)
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#1363
No description provided.