18.1.1 & acme client

[dcol]

So it's a permissions issue.

I would like to see someone (hint! hint!) write up a nice tutorial on using the acme client plugin to create certs.

[TheWebWasher]

Does anybody know when the update for acme 2.6.7 (ETA on LE package) is coming ??

[TheWebWasher]

Sorry 2.7.6 of course

[franco]

I will ping the FreeBSD maintainer.

[franco]

https://bsd.network/@dvl/99531493305337397

[elektroinside]

Nice Thanks, Franco!

[TheWebWasher]

Thanks Franco, how can we update the acme package ??

[franco]

# opnsense-code tools ports
# cd /usr/ports/sysutils/acme.sh
# make
# make deinstall
# make install

Will also be in 18.1.3, but that takes two more weeks.


Cheers,
Franco

[TheWebWasher]

Thank you, it works! In your description is a mistake

The correct directory is:

# cd /usr/ports/security/acme.sh

I am very exicited about the quick answers here. Thank you at all people !!

[dcol]

Can't get a cert issued. Log shows 'Create domain key error'
I can see the key file was created.

What am I doing wrong?

[eshield]

Can't get a cert issued. Log shows 'Create domain key error'
I can see the key file was created.

What am I doing wrong?

Well, um, bro, update your acme.sh script or wait for 8.1.3 in a week or so  How to?  This has been answered few times some posts above 

[dcol]

acme.sh was updated. This is not the reason.

[BeNe]

acme.sh was updated. This is not the reason.

Still Create domain key error ?

I did what franco posted:

Code: [Select]

# opnsense-code tools ports
# cd /usr/ports/sysutils/acme.sh
# make
# make deinstall
# make install
After that i deleted the certificated that are in a failed status und created them successfully again.

[eshield]

acme.sh was updated. This is not the reason.

Well, there is very only thing left: Your validation method fails. Personally, I always used a non-standard port for GUI so a HTTP-01 method never worked for me. I use DNS-01 with Hurricane Electric. I've configured DigitalOcean 2 droplets in a week and both works with DNS-01 challenge and doesn't validate with HTTP-01.