search

kchristensen / udm-le

Let's Encrypt support for Ubiquiti UniFi OS
MIT License
572 stars 79 forks source link

trying to use http-01 #26

Closed FreezyExp closed 3 years ago

FreezyExp commented 3 years ago

Here is what I have tried so far:

adding to LEG_ARGS in udm-le.sh: --http --http.port :81

and while testing: --server https://acme-staging-v02.api.letsencrypt.org/directory

Adding port forwarding from 80 to 81

acme: error: 400 :: urn:ietf:params:acme:error:connection :: Fetching http://<url>/.well-known/adme-challenge/<token>: Timeout during connect (likely firewall problem)

Not sure if this method will even work as port 80 seems to be in use, most likely it's hidden and in use for unifi-os.

Anyone else got any ideas of things to try to get http-01 to work?

kchristensen commented 3 years ago

Eh, you're going to run into all sorts of problems trying this probably, since you're going to have to figure out how to modify firewall rules on the UDMP in order to open up whatever port you try to use. I'd really suggest getting DNS setup somewhere you can use DNS-01 challenges with.

FreezyExp commented 3 years ago

Yup I ended up just forwarding the ports to a server, then having that handle all the certificates. As pushing certificates to the UDM pro is not that difficult.

So I abandoned this problem. shall I close the issue?

kchristensen commented 3 years ago

Yup, closing!