search

hungnguyenm / edgemax-acme

Let's Encrypt setup instructions for Ubiquiti EdgeRouter using DNS-01
149 stars 31 forks source link

Using script on Edgerouter X with GoDaddy fails #10

Closed nahoj74 closed 2 years ago

nahoj74 commented 3 years ago

Decided to get a certificate for my Edgerouter X and found this project. Registrered a domain with GoDaddy and got the API keys.

Implemented script according to the readme 

mkdir -p /config/scripts/acme/dnsapi
curl -o /config/scripts/acme/acme.sh https://raw.githubusercontent.com/acmesh-official/acme.sh/master/acme.sh
curl -o /config/scripts/renew.acme.sh https://raw.githubusercontent.com/hungnguyenm/edgemax-acme/master/renew.acme.sh
curl -o /config/scripts/reload.acme.sh https://raw.githubusercontent.com/hungnguyenm/edgemax-acme/master/reload.acme.sh
curl -o /config/scripts/acme/dnsapi/dns_gd.sh https://raw.githubusercontent.com/acmesh-official/acme.sh/master/dnsapi/dns_gd.sh
chmod 755 /config/scripts/acme/acme.sh /config/scripts/renew.acme.sh /config/scripts/reload.acme.sh /config/scripts/acme/dnsapi/dns_gd.sh

First the edgerouter x doesn't like the "killall" command, though the UI is pretty much gone after the command. Second I get "[Mon Jul 26 11:15:52 UTC 2021] Can not init api for: https://acme.zerossl.com/v2/DV90."

image

I guess there are some additional configuration steps needed? Assuming I want to have a cert from Letsencrypt, how do tell the config to go there?

dmengelt commented 3 years ago

The following worked for me:

  1. Create a /config/scripts/acme/account.conf file with the following content: 
    DEFAULT_ACME_SERVER='https://acme-v02.api.letsencrypt.org/directory'
  2. Run the /config/scripts/renew.acme.sh script again

The "problem" is that ACME switched from letsencrypt to ZeroSSL https://github.com/acmesh-official/acme.sh/issues/3472#issuecomment-892752538

nahoj74 commented 3 years ago

The following worked for me:

  1. Create a /config/scripts/acme/account.conf file with the following content:
DEFAULT_ACME_SERVER='https://acme-v02.api.letsencrypt.org/directory'
  1. Run the /config/scripts/renew.acme.sh script again

The "problem" is that ACME switched from letsencrypt to ZeroSSL acmesh-official/acme.sh#3472 (comment)

Solved it for me as well. Thanks!

hungnguyenm commented 2 years ago

Closing this as #17 forces ACME to use Let's Encrypt instead of ZeroSSL.