OPNsense Forum

Archive => 20.7 Legacy Series => Topic started by: hemin on December 06, 2020, 12:15:25 PM

Title: Registation failed with letsencrypt and duckdns
Post by: hemin on December 06, 2020, 12:15:25 PM
Hello,

I have a little problem trying to register with letsencrypt and duckdns.

I configured the challenge type with DNS-01, DuckDNS API and the API token.

Certificate Options:
Common Name *******.duckdns.org
Description
Alt Names:

Let's Encrypt Settings
LE Account: Firewall WEB GUI Cert Acc
Challenge Type: Firewall WEB GUI Cert
Auto Renewal
Renewal Interval 60

Security Settings
Key Length 4096 bit
OCSP Must Staple "unchecked"
   
Advanced Settings
Automations
DNS Alias: Mode Not using DNS alias mode


When I try to register the certificate, I get the following error:

Trying to add TXT record
param='domains=_acme-challenge.********.duckdns.org&token=******&txt=*****'
url='https://www.duckdns.org/update?domains=_acme-challenge.******.duckdns.org&token=*****&txt=******'
GET
url='https://www.duckdns.org/update?domains=_acme-challenge.******.duckdns.org&token=*********&txt=*********'
timeout=
_CURL='curl -L --silent --dump-header /var/etc/acme-client/home/http.header '
ret='0'
Errors happened during adding the TXT record, response=KO
Error add txt for domain:_acme-challenge.******.duckdns.org


Any ideas what it's wrong?

thanks
Title: Re: Registation failed with letsencrypt and duckdns
Post by: Fright on December 06, 2020, 02:11:08 PM
hi!
try
https://github.com/opnsense/plugins/issues/2060
Title: Re: Registation failed with letsencrypt and duckdns
Post by: hemin on December 06, 2020, 07:12:52 PM
Hi Fright,

Seems that the method on the link doesn't work for some users, and I'm one of these.
I have done a "dirty" workaround editing the script on '/usr/local/share/examples/acme.sh/dnsapi/dns_duckdns.sh'
and changed all "fulldomain=$1" lines by "fulldomain=*****.duckdns.org", and that works...

Hope it will be solved on the future.

Thanks!