search

freeipa / freeipa-letsencrypt

A quick hack allowing to use Let's Encrypt certificates for FreeIPA web interface.
140 stars 71 forks source link

LE Error "cannot issue for 'server.example.test'" #21

Closed Electromaster232 closed 4 years ago

Electromaster232 commented 4 years ago

Hello, I'm currently using the latest commit on the master branch along with CentOS 8. I've been able to get to the part where the script invokes Certbot in order to actually get the certificate, but am left with the following error:

Enter pass phrase for /var/lib/ipa/private/httpd.key:
Redirecting to /bin/systemctl stop httpd.service
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator standalone, Installer None
An unexpected error occurred:
The server will not issue certificates for the identifier :: Error creating new order :: Cannot issue for "server.example.test": Domain name does not end with a valid public suffix (TLD)

I'm not really sure where this random domain is coming from. My FreeIPA server is definitely configured with the correct domain, as the default self-signed certificates and Apache VHost use the correct domain. I'm sure its something I'm missing, but I can't pinpoint what. Any help would be appreciated.

Thanks

Electromaster232 commented 4 years ago

Nevermind, I can't read directions apparently. Can't believe I literally missed an entire step of the process, and thought to make an issue before checking myself. Remind me not to try installing FreeIPA at 2am. Sorry to bother.