Messages

[Solution]

Had an issue with the step where trying to forcefully issue the test and production certificate.

Seems that I am having the best of luck. The OSCP stapling just got deprecated at Lets Encrypt 5 days ago.

Resulting in:

Code Select Expand

AcmeClient: AcmeClient: The shell command returned exit code '1': '/usr/local/sbin/acme.sh --issue --syslog 9 --debug 3 --server 'letsencrypt_test' --dns 'dns_desec' --dnssleep '240' --home '/var/etc/acme-client/home' --cert-home '/var/etc/acme-client/cert-home/redacted.02853966' --certpath '/var/etc/acme-client/certs/redacted.02853966/cert.pem' --keypath '/var/etc/acme-client/keys/redacted.02853966/private.key' --capath '/var/etc/acme-client/certs/redacted.02853966/chain.pem' --fullchainpath '/var/etc/acme-client/certs/redacted.02853966/fullchain.pem' --domain '*.redacted.dedyn.io' --days '1' --force --ocsp --keylength 'ec-384' --accountconf '/var/etc/acme-client/accounts/redacted.79212996_stg/account.conf''
After turning debugging mode on it seems the following had happened:

Code Select Expand

"detail": "Error finalizing order :: OCSP must-staple extension is no longer available: see https://letsencrypt.org/2024/12/05/ending-ocsp",

Solution
Had to turn OSCP stapling off. (OSCP Must Staple setting in the certificate settings in the ACME client)