kchristensen
commented
3 years ago Hmm, that looks right to me, although the Cloudflare API permissions can be a little weird. Try not limiting it to your domain under Zone Resources and give it permissions on your entire account and see if that works as an experiment. At one point in the past there was an issue with limiting the scope to a specific zone that sounds similar to what you're seeing.
I just logged into my Cloudflare account and my token is setup the same as yours, so this is a bit puzzling.
SpicyAlmondMilk
seekerPL
lcollins
StefanBeOs
Hi, Not sure if I one something wrong, but the script fails on finding my zone. zone polska.org.pl
UDM-le env:
#
Required configuration
#
Email for LetsEncrypt certificate issuance
CERT_EMAIL='MYEMAIL@gmail.com'
The FQDN of your UDMP (comma separated fqdns are supported)
CERT_HOSTS='polska.org.pl'
Enable updating Captive Portal certificate as well as device certificate
ENABLE_CAPTIVE='no'
CloudFlare settings, see the README.md for information about other providers
CLOUDFLARE_DNS_API_TOKEN='MYTOKENFROMCLOUDFLARE' DNS_PROVIDER='cloudflare'
#
Change stuff below at your own risk
#
DNS_RESOLVERS supports a host:port if you need to override system DNS
DNS_RESOLVERS=''
Changing below requires changing line 6 of udm-le.sh
UDM_LE_PATH='/mnt/data/udm-le'
These should only change if Unifi-OS core changes require it
CERT_IMPORT_CMD='java -jar /usr/lib/unifi/lib/ace.jar import_key_cert' UBIOS_CERT_PATH='/mnt/data/unifi-os/unifi-core/config' UNIFIOS_CERT_PATH='/data/unifi-core/config'
Information during running the script:
Your account credentials have been saved in your Let's Encrypt configuration directory at "/var/lib/lego/accounts".
You should make a secure backup of this folder now. This configuration directory will also contain certificates and private keys obtained from Let's Encrypt so making regular backups of this folder is ideal. 2020/08/25 08:00:39 [INFO] [polska.org.pl] acme: Obtaining bundled SAN certificate 2020/08/25 08:00:40 [INFO] [polska.org.pl] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/6760625124 2020/08/25 08:00:40 [INFO] [polska.org.pl] acme: Could not find solver for: tls-alpn-01 2020/08/25 08:00:40 [INFO] [polska.org.pl] acme: Could not find solver for: http-01 2020/08/25 08:00:40 [INFO] [polska.org.pl] acme: use dns-01 solver 2020/08/25 08:00:40 [INFO] [polska.org.pl] acme: Preparing to solve DNS-01 2020/08/25 08:00:41 [INFO] [polska.org.pl] acme: Cleaning DNS-01 challenge 2020/08/25 08:00:42 [WARN] [polska.org.pl] acme: cleaning up failed: cloudflare: failed to find zone polska.org.pl.: ListZonesContext command failed: error from makeRequest: HTTP status 400: content "{\"success\":false,\"errors\":[{\"code\":6003,\"message\":\"Invalid request headers\",\"error_chain\":[{\"code\":6111,\"message\":\"Invalid format for Authorization header\"}]}],\"messages\":[],\"result\":null}" 2020/08/25 08:00:42 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/6760625124 2020/08/25 08:00:42 Could not obtain certificates: error: one or more domains had a problem: [polska.org.pl] [polska.org.pl] acme: error presenting token: cloudflare: failed to find zone polska.org.pl.: ListZonesContext command failed: error from makeRequest: HTTP status 400: content "{\"success\":false,\"errors\":[{\"code\":6003,\"message\":\"Invalid request headers\",\"error_chain\":[{\"code\":6111,\"message\":\"Invalid format for Authorization header\"}]}],\"messages\":[],\"result\":null}"
Is this some kind of bug, or I just wrongly use the CERT_HOSTS='polska.org.pl' field?
My CloudFlare API token setup