How to use auto TLS with HTTP-01 challenge type?

[WhileLoop]

I have not been able to configure echo use HTTP-01 with auto TLS. The follow code using the standard library works perfectly on a VM with port 443 access restricted. A request on port 443 results in a HTTP-01 challenge being handled on port 80 and a valid certificate is retrieved.

package main

import (
	"fmt"
	"net/http"
	"golang.org/x/crypto/acme"
	"golang.org/x/crypto/acme/autocert"
)

func main() {
	acm := &autocert.Manager{
		Prompt:     autocert.AcceptTOS,
		Client:     &acme.Client{
			DirectoryURL: "https://acme-staging-v02.api.letsencrypt.org/directory",
		},
		Cache:      autocert.DirCache(".acme"),
		HostPolicy: autocert.HostWhitelist("test.company.fake"),
	}

	h := &http.Server{
		Handler: acm.HTTPHandler(nil),
		Addr: ":80",
	}

	fmt.Println("starting http")
	go h.ListenAndServe()

	mux := http.NewServeMux()
	mux.HandleFunc("/", HelloServer)

	t := &http.Server{
		Handler: mux,
		Addr: ":443",
		TLSConfig: acm.TLSConfig(),
	}

	fmt.Println("starting https")
	err := t.ListenAndServeTLS("", "")
	if err != nil {
		fmt.Println(err)
	}
	fmt.Println("shutting down")
}

func HelloServer(w http.ResponseWriter, r *http.Request) {
	fmt.Fprintf(w, "Hello, %s!", r.URL.Path[1:])
}

I have not been able to get the same behavior with Echo. I tried the example in the cookbook and also tried this customized version:

package main

import (
	"fmt"
	"net/http"
	"golang.org/x/crypto/acme"
	"golang.org/x/crypto/acme/autocert"
	"github.com/labstack/echo/v4"
	"github.com/labstack/echo/v4/middleware"
)

func main3() {
	e := echo.New()

	e.Use(middleware.Recover())
	e.Use(middleware.Logger())
	e.GET("/", func(c echo.Context) error {
		return c.HTML(http.StatusOK, `
			<h1>Welcome to Echo!</h1>
			<h3>TLS certificates automatically installed from Let's Encrypt :)</h3>
		`)
	})

	acm := &autocert.Manager{
		Prompt:     autocert.AcceptTOS,
		Client:     &acme.Client{
			DirectoryURL: "https://acme-staging-v02.api.letsencrypt.org/directory",
		},
		Cache:      autocert.DirCache(".acme"),
		HostPolicy: autocert.HostWhitelist("test.company.fake"),
	}

	h := &http.Server{
		Handler: acm.HTTPHandler(nil),
		Addr: ":80",
	}

	go e.StartServer(h)

	t := &http.Server{
		Addr: ":443",
		TLSConfig: acm.TLSConfig(),
	}

	err := e.StartServer(t)
	if err != nil {
		fmt.Println(err)
	}
	fmt.Println("shutting down")
}

The HTTP-01 challenge is not completed.

[aldas]

When you start multiple servers with same Echo instance it is better if you create your own server instance with Echo as handler.

So you are not required to use Echo Start* methods and could just set Handler to e on server

Modified mux example with Echo as handler:

	t := &http.Server{
		Handler: e,
		Addr: ":443",
		TLSConfig: acm.TLSConfig(),
	}

	fmt.Println("starting https")
	err := t.ListenAndServeTLS("", "")