From 8568ada34c268adcb86ef32ea8e83b069e1a13a1 Mon Sep 17 00:00:00 2001 From: Irbe Krumina Date: Sat, 19 Apr 2025 11:36:27 +0100 Subject: [PATCH] ipn/ipnlocal: log ACME Order URL for invalid Orders WaitOrder error does not usually include authorization failure reason, but that can be looked up following the Order URL. Updates tailscale/corp#27651 Signed-off-by: Irbe Krumina --- ipn/ipnlocal/cert.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ipn/ipnlocal/cert.go b/ipn/ipnlocal/cert.go index 86052eb8d..42b3ff033 100644 --- a/ipn/ipnlocal/cert.go +++ b/ipn/ipnlocal/cert.go @@ -602,9 +602,9 @@ var getCertPEM = func(ctx context.Context, b *LocalBackend, cs certStore, logf l return nil, ctx.Err() } if oe, ok := err.(*acme.OrderError); ok { - logf("acme: WaitOrder: OrderError status %q", oe.Status) + logf("acme: WaitOrder: OrderError status %q, Order URL %q", oe.Status, orderURI) } else { - logf("acme: WaitOrder error: %v", err) + logf("acme: WaitOrder error: %v, Order URL %q", err, orderURI) } return nil, err }