OPNsense Forum

English Forums => 24.7, 24.10 Legacy Series => Topic started by: BruiserCT on September 25, 2024, 03:14:03 PM

Title: ACME client and Cloudflare DNS
Post by: BruiserCT on September 25, 2024, 03:14:03 PM
I see many posts with various ACME client issues.  However, I believe my case is a little difference.  I am not able to get a certificate with DNS validation from Cloudflare.  Also, the debug is not working as well.

Version: 24.7.4_1   
Architecture: amd64
Packages up to date

Attached is the log file output.

Thanks to anyone that can help me past this.
Title: Re: ACME client and Cloudflare DNS
Post by: Gauss23 on September 25, 2024, 03:36:22 PM
"Domain name needs at least one dot". What did you enter?
Title: Re: ACME client and Cloudflare DNS
Post by: BruiserCT on September 25, 2024, 03:50:52 PM
I attached the certificate config:

Used hostname and for the SAN was the FQDN which should have plenty of "dots".  This is the confusing part.

Thanks for the reply.
Title: Re: ACME client and Cloudflare DNS
Post by: meyergru on September 25, 2024, 04:00:14 PM
The common name must have a dot in it, too - it must even be a real domain for verification, i.e. you cannot use eh-xxx.local or something to that extent.

The error message clearly tells you so, if I read the obfuscated message correctly.

If you want certificates for local names, you will have to use your own CA.
Title: Re: ACME client and Cloudflare DNS *Solved*
Post by: BruiserCT on September 25, 2024, 04:59:53 PM
OK - That did it.  I just used the FQDN for the Common Name.  Typically, I would used the hostname and the FQDN for the SAN.

I know the error message was talking about "dots" was just confusing since I had the FQDN in the SAN section.

Thanks for the help.