ndilieto / uacme

ACMEv2 client written in plain C with minimal dependencies
GNU General Public License v3.0
436 stars 37 forks source link

how to force HTTP-01 challenge? #88

Closed ecomstation closed 3 weeks ago

ecomstation commented 3 weeks ago

Hi all,

uacme.exe: version 1.2.4

usage: uacme.exe [-a|--acme-url URL] [-b|--bits BITS] [-c|--confdir DIR]
[-d|--days DAYS] [-f|--force] [-h|--hook PROGRAM] [-m|--must-staple]
[-n|--never-create] [-o|--no-ocsp] [-s|--staging] [-t|--type RSA | EC]
[-v|--verbose ...] [-V|--version] [-y|--yes] [-?|--help]
new [EMAIL] | update [EMAIL] | deactivate | newkey |
issue IDENTIFIER [ALTNAME ...]] | revoke CERTFILE

i've random fails renewing certificates and LE's support say that i must change my script to tell UACME i use HTTP-01 challenge.

the the moment i'm using this script:

uacme issue www.mywebsite.com --c c:/uacme -h hook_mywebsite_com.cmd

thanks

massimo

ndilieto commented 3 weeks ago

Keep in mind that challenge types may be served in any order by the ACME server. The hook script decides whether to accept or reject a challenge. By returning exit code 0 (the default) the script accepts the challenge. Any other non-zero exit code rejects it. uacme passes the challenge type to the script in the second argument, refer to the manual page for details