OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 17.7 Legacy Series »
  • LetsEncrypt WIKI/Documentation
« previous next »
  • Print
Pages: [1]

Author Topic: LetsEncrypt WIKI/Documentation  (Read 15627 times)

Ren

  • Jr. Member
  • **
  • Posts: 52
  • Karma: 3
    • View Profile
LetsEncrypt WIKI/Documentation
« on: October 30, 2017, 06:39:56 pm »
Hey Guys,

I'm currently trying to locate documentation on the LetsEncrypt plugin. I'm running into validation errors when trying validate my domain using the duckdns API. Thus, i want to verify if my configuration is correct using the documentation.
Logged

fabian

  • Hero Member
  • *****
  • Posts: 2768
  • Karma: 199
  • OPNsense Contributor (Language, VPN, Proxy, etc.)
    • View Profile
    • Personal Homepage
Re: LetsEncrypt WIKI/Documentation
« Reply #1 on: October 30, 2017, 08:11:08 pm »
For this plugin there is no documentation - maybe fraenki adds it some day. Somebody may be able to help you if you add an error message here.
Logged

Ren

  • Jr. Member
  • **
  • Posts: 52
  • Karma: 3
    • View Profile
Re: LetsEncrypt WIKI/Documentation
« Reply #2 on: October 31, 2017, 03:56:57 am »
Ok in most fields i do not know what info is needed as i've never setup LetsEncrypt certificate Below is current configuration

Under Accounts
NAME: dnyamic dns name
Email: email account associated with duckdns account

Under Validation Methods
Name: Duckdns
Description: DuckDNS Validation
Challenge Type DNS-01
DNS Service: DuckDNS API
Sleep Time: 120
API Token: MY DUCKDNS TOKEN


Under Certificates
Common Name: dynamic dns name
Description: Home
Alt Name:
LE Account: Account Above
Validation Methon: Validation Above

Currently im unable to generate a certificate for my dynamic dns account as im running into validation error when requesting a certificate.

Code: [Select]
[Mon Oct 30 10:49:57 EDT 2017] Please check log file for more details: /var/log/acme.sh.log
[Mon Oct 30 10:49:57 EDT 2017] _on_issue_err
[Mon Oct 30 10:49:57 EDT 2017] skip dns.
[Mon Oct 30 10:49:57 EDT 2017] _clearupdns
[Mon Oct 30 10:49:57 EDT 2017] No need to restore nginx, skip.
[Mon Oct 30 10:49:57 EDT 2017] pid
[Mon Oct 30 10:49:57 EDT 2017] Create domain key error.


The private key and conf were created in /var/etc/acme-client/home/$DOMAIN_NAME_HERE but i wasn't issued a cert
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13689
  • Karma: 1176
    • View Profile
Re: LetsEncrypt WIKI/Documentation
« Reply #3 on: October 31, 2017, 09:03:53 am »
Frank added a tutorial to his first PR, maybe we can take this as a base for the docs:

https://github.com/opnsense/plugins/pull/66


Cheers,
Franco
Logged

Ren

  • Jr. Member
  • **
  • Posts: 52
  • Karma: 3
    • View Profile
Re: LetsEncrypt WIKI/Documentation
« Reply #4 on: November 01, 2017, 05:14:06 am »
Thank you. That actually helped. On the duckdns API line i had to format the data like the below

https://www.duckdns.org/update?domains=$DOMAIN&token=$TOKENHERE&ip=
Logged

bulmaro

  • Newbie
  • *
  • Posts: 42
  • Karma: 12
    • View Profile
Re: LetsEncrypt WIKI/Documentation
« Reply #5 on: November 21, 2017, 06:15:56 pm »
I am in need of configuring LetsEncrypt, I do not have much knowledge on the subject. I currently have the ddns with noip.com, someone can help me with the steps to configure my https.

I appreciate the attention.
Logged

Ren

  • Jr. Member
  • **
  • Posts: 52
  • Karma: 3
    • View Profile
Re: LetsEncrypt WIKI/Documentation
« Reply #6 on: November 21, 2017, 08:22:40 pm »
Quote from: bulmaro on November 21, 2017, 06:15:56 pm
I am in need of configuring LetsEncrypt, I do not have much knowledge on the subject. I currently have the ddns with noip.com, someone can help me with the steps to configure my https.

I appreciate the attention.

I'm not familiar with the no-ip DDNS service but hopefully i can assist a little. What have you configured so far ?

Logged

bulmaro

  • Newbie
  • *
  • Posts: 42
  • Karma: 12
    • View Profile
Re: LetsEncrypt WIKI/Documentation
« Reply #7 on: November 24, 2017, 06:40:24 pm »
I thank you for your kind attention, you help me indicate some domain provider to be able to do laboratory test.
thank you very much.
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 17.7 Legacy Series »
  • LetsEncrypt WIKI/Documentation
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2