search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
38.7k stars 4.91k forks source link

Improve Wiki page for running acme.sh on OpenWrt #4497

Open 0xb1ff opened 1 year ago

0xb1ff commented 1 year ago

This Wiki page is very helpful: https://github.com/acmesh-official/acme.sh/wiki/How-to-run-on-OpenWrt

However, information about required packages when using dnsapi with a DNS server that uses 2FA (with a shared secret) appears to be incomplete.

It appears that 2FA using TOTP needs oathtool, which is provided by the package oath-toolkit.

It would be helpful to add to the end of "Step 1: Install packages":

If you want to use two-factor authentification (using a shared secret) with DNS-based certificate verification, also install the OATH toolkit: opkg install oath-toolkit

github-actions[bot] commented 1 year ago

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

stokito commented 1 year ago

@0xb1ff how the two factor auth works on renewal? Does it asks for the OTP each time? Then you can't automate it.