OPNsense Forum
Archive => 17.7 Legacy Series => Topic started by: Ren on October 30, 2017, 06:39:56 pm
-
Hey Guys,
I'm currently trying to locate documentation on the LetsEncrypt plugin. I'm running into validation errors when trying validate my domain using the duckdns API. Thus, i want to verify if my configuration is correct using the documentation.
-
For this plugin there is no documentation - maybe fraenki adds it some day. Somebody may be able to help you if you add an error message here.
-
Ok in most fields i do not know what info is needed as i've never setup LetsEncrypt certificate Below is current configuration
Under Accounts
NAME: dnyamic dns name
Email: email account associated with duckdns account
Under Validation Methods
Name: Duckdns
Description: DuckDNS Validation
Challenge Type DNS-01
DNS Service: DuckDNS API
Sleep Time: 120
API Token: MY DUCKDNS TOKEN
Under Certificates
Common Name: dynamic dns name
Description: Home
Alt Name:
LE Account: Account Above
Validation Methon: Validation Above
Currently im unable to generate a certificate for my dynamic dns account as im running into validation error when requesting a certificate.
[Mon Oct 30 10:49:57 EDT 2017] Please check log file for more details: /var/log/acme.sh.log
[Mon Oct 30 10:49:57 EDT 2017] _on_issue_err
[Mon Oct 30 10:49:57 EDT 2017] skip dns.
[Mon Oct 30 10:49:57 EDT 2017] _clearupdns
[Mon Oct 30 10:49:57 EDT 2017] No need to restore nginx, skip.
[Mon Oct 30 10:49:57 EDT 2017] pid
[Mon Oct 30 10:49:57 EDT 2017] Create domain key error.
The private key and conf were created in /var/etc/acme-client/home/$DOMAIN_NAME_HERE but i wasn't issued a cert
-
Frank added a tutorial to his first PR, maybe we can take this as a base for the docs:
https://github.com/opnsense/plugins/pull/66
Cheers,
Franco
-
Thank you. That actually helped. On the duckdns API line i had to format the data like the below
https://www.duckdns.org/update?domains=$DOMAIN&token=$TOKENHERE&ip=
-
I am in need of configuring LetsEncrypt, I do not have much knowledge on the subject. I currently have the ddns with noip.com, someone can help me with the steps to configure my https.
I appreciate the attention.
-
I am in need of configuring LetsEncrypt, I do not have much knowledge on the subject. I currently have the ddns with noip.com, someone can help me with the steps to configure my https.
I appreciate the attention.
I'm not familiar with the no-ip DDNS service but hopefully i can assist a little. What have you configured so far ?
-
I thank you for your kind attention, you help me indicate some domain provider to be able to do laboratory test.
thank you very much.