Print Page - Acme-client LetsEncrypt Fails

Title: Acme-client LetsEncrypt Fails
Post by: square-software on November 18, 2024, 04:27:43 AM

Strange issue after upgrade -

1) New Certificate issue with DNS challenge works with "Let's Encrypt Test CA" but the Browser throws Error code: SEC_ERROR_UNKNOWN_ISSUER. / net::ERR_CERT_AUTHORITY_INVALID

2) New Certificate Does not work with "Let's Encrypt Default", fails with error "AcmeClient: domain validation failed (dns01) "

Is it just me or could this be a bug ?

Cheers

Title: Re: Acme-client LetsEncrypt Fails
Post by: square-software on November 18, 2024, 08:09:12 AM

AM trying to perform Manual DNS procedure, Do you have any clue how to run the command manually in the backend?

_{eg. /usr/local/sbin/acme.sh --renew --syslog 9 --debug 3 --server 'letsencrypt' --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please ......}

Account folders are separate for STG and PROD and guess --accountconf won't work if used with Working STG folder .. any hint will be appreciated .

Title: Re: Acme-client LetsEncrypt Fails
Post by: square-software on November 18, 2024, 04:35:27 PM

Replace acme.sh using "acme.sh --upgrade" and this should fix this issue.

OPNsense Forum

English Forums => 24.7, 24.10 Legacy Series => Topic started by: square-software on November 18, 2024, 04:27:43 AM