search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
37.6k stars 4.84k forks source link

Report Oracle Cloud Infrastructure (OCI) DNS Service Issues #3540

Open Djelibeybi opened 3 years ago

Djelibeybi commented 3 years ago

This thread is for users of Oracle Cloud Infrastructure DNS to ask questions or report any issues or bugs they've encountered.

Neilpang commented 3 years ago

thanks, I will check it soon.

Neilpang commented 3 years ago

I don't think OCI_FINGERPRINT is necessary. Can we calcualte it from the OCI_PRIVATE_KEY ?

Neilpang commented 3 years ago

please also move OCI_REGION in to the first section, It's so common for a user to specify a region.

Djelibeybi commented 3 years ago

No, the OCI_FINGERPRINT is for the public key that we don't have. And OCI_REGION is optional, which is why it's in the second section.

Neilpang commented 3 years ago

I knew OCI_REGION is optional, but there will be many users reporting bug if it's not working for him, just because they are not in the defalt region.

Djelibeybi commented 3 years ago

You don't need to use the default region. Any DNS endpoint will work, because the DNS zones are no longer region specific.

Neilpang commented 3 years ago

You don't need to use the default region. Any DNS endpoint will work, because the DNS zones are no longer region specific.

I see.

Neilpang commented 3 years ago

No, the OCI_FINGERPRINT is for the public key that we don't have

Is the public key from the OCI_PRIVATE_KEY ?

Djelibeybi commented 3 years ago

Yes, we could generate the public key and then the fingerprint, but the fingerprint is something users are used to configuring (it's required for the OCI CLI configuration). I wanted the configuration to feel the same as the CLI, even though we don't use it.

Neilpang commented 3 years ago

but the fingerprint is something users are used to configurin

Let's make it easier as we can. less env variables will be the best.

Djelibeybi commented 3 years ago

Fair enough. Let me work on that.

Neilpang commented 3 years ago

Thanks

Neilpang commented 3 years ago

Once I learn to use a new tool, I like it more if it has fewer configurations.

Djelibeybi commented 3 years ago

Once I learn to use a new tool, I like it more if it has fewer configurations.

I agree, but I'm not sure our SDK/CLI team do. :) I'm also working on a version that uses instance principals so if you run acme.sh on an OCI instance, it'll auto-configure itself based on data from the OCI metadata service.

Neilpang commented 3 years ago

I'm also working on a version that uses instance principals so if you run acme.sh on an OCI instance, it'll auto-configure itself based on data from the OCI metadata service.

It would be better, but I would recommend it to be our next goal later.

Djelibeybi commented 3 years ago

It would be better, but I would recommend it to be our next goal later.

Yes, that's my intention too.