From 3cb3bd3d21e58b75d0097756777d96d2d2286774 Mon Sep 17 00:00:00 2001
From: Fang-Pen Lin <hello@fangpenlin.com>
Date: Mon, 1 Dec 2025 17:34:34 -0800
Subject: [PATCH] conn reset

---
 backend/src/ee/services/pki-acme/pki-acme-challenge-service.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/backend/src/ee/services/pki-acme/pki-acme-challenge-service.ts b/backend/src/ee/services/pki-acme/pki-acme-challenge-service.ts
index 572d52bf5..f477d0977 100644
--- a/backend/src/ee/services/pki-acme/pki-acme-challenge-service.ts
+++ b/backend/src/ee/services/pki-acme/pki-acme-challenge-service.ts
@@ -129,6 +129,9 @@ export const pkiAcmeChallengeServiceFactory = ({
         if (errorCode === "ENOTFOUND" || errorMessage.includes("ENOTFOUND")) {
           throw new AcmeDnsFailureError({ message: "Hostname could not be resolved (DNS failure)" });
         }
+        if (errorCode === "ECONNRESET" || errorMessage.includes("ECONNRESET")) {
+          throw new AcmeConnectionError({ message: "Connection reset by peer" });
+        }
         if (errorCode === "ECONNABORTED" || errorMessage.includes("timeout")) {
           logger.error(exp, "Connection timed out while validating ACME challenge response");
           throw new AcmeConnectionError({ message: "Connection timed out" });