OPNsense Forum

Archive => 20.7 Legacy Series => Topic started by: astuckey on April 20, 2020, 10:20:06 AM

Title: os-acme-client -> dns_me.sh incorrect domain id from regex
Post by: astuckey on April 20, 2020, 10:20:06 AM
Hi there,

The dns_me.sh provided with os-acme-client is outdated and cannot determine the domain id from DNSMadeEasy when communicating via the API.

The fix is in a later release of the acme.sh/dnsapi/dns_me.sh which I have tested to work (after checking out manually and replacing on OpnSense).

OPNsense 20.1.4-amd64
FreeBSD 11.2-RELEASE-p18-HBSD
OpenSSL 1.1.1f 31 Mar 2020
Plugin: os-acme-client: 1.3.0
Package: acme.sh: 2.8.5_2

Fixed version of acme.sh: 2.8.6

Is it possible to get the acme client updated to the latest?

Regards,
Adam
Title: Re: os-acme-client -> dns_me.sh incorrect domain id from regex
Post by: pandabrain on May 14, 2020, 05:32:49 PM
*bump*

Similar thing with cloudflare DNS validation, which stopped working about 2 weeks ago due to some faulty regex.
It also got fixed with v2.8.6:
https://github.com/acmesh-official/acme.sh/issues/2888

An update would be much appreciated.

I also tested it by updating /usr/local/share/examples/acme.sh/dnsapi/dns_cf.sh
with dnsapi/dns_cf.sh from the 2.8.6 release.
(https://github.com/acmesh-official/acme.sh/releases/tag/2.8.6)
It works fine now.

Maybe someone should contact the package maintainer? His/her email address is listed in the package list in opnsense, I just don't want to bother anyone so i didn't write a mail. (Also I am a free user, so no support for me anyway.)