auto-ssl / auto-ssl/lua-resty-auto-ssl

Renewal fails with error: auto-ssl: failed to obtain lock: closed, context: ngx.timer

Open
#286 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Lua
Stars
2k
Forks
184
PR merge metrics
No merged PRs in 30d

Description

We are using redis in the backend for storing certificates. We have around 9 lacs certificates in our cache. After every few days we are facing this error and our renewals are failing. We are running around 8 openresty servers. We also noticed sometimes renewal doesn't happen for all the domains present in our cache.

If anyone could provide any help, that would be great.

Thank you in advance.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing the renewal work scheduled through ngx.timer and the Redis-backed certificate cache in lua-resty-auto-ssl. Reproduce the closed-lock error with multiple OpenResty servers and a large cache, then verify that renewals complete for all cached domains without lock failures.

Written by the indexing model from the issue text.

Assessment

Tech stack
lua, nginx, redis
Domain
backend, distributed-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.