nickjj / ansible-letsencrypt

Install and auto-renew SSL certificates with Let's Encrypt and Ansible.
MIT License
29 stars 9 forks source link

Show SSL certificate generation output step failed #8

Closed micisse closed 4 years ago

micisse commented 4 years ago

Hello, I got this problem during the ansible process in the "Show SSL certificate generation output" step in main.yml. The problem comes from the file "acme_tiny". I captured the error. Do you have any solution please ?!

Show SSL Certificate generation output

nickjj commented 4 years ago

Hi,

What OS / version are you using? What version of Python are you using? What version of this role are you using?

micisse commented 4 years ago

Hi,

I use Python3 (ansible_python_interpreter="env python3") I use v0.3.2 realease of this role (the last i think) OS is Ubuntu 16.04

nickjj commented 4 years ago

Which version of Python 3 are you using?

micisse commented 4 years ago

$ python3 --version

I've this: Python 3.5.2

nickjj commented 4 years ago

Have you checked this https://github.com/diafygi/acme-tiny/issues/247?

micisse commented 4 years ago

No, thanks for that so with this role, we cannot create wildcard (ex: *.exemple.com). You've any alternative ?!

letsencrypt_domains: ["exemple.com", "*.exemple.com"]

nickjj commented 4 years ago

It's a limitation of acme-tiny. It doesn't support doing DNS based validation and DNS validation is required for wildcards.

You'll want to use something else. Maybe https://github.com/acmesh-official/acme.sh or https://github.com/certbot/certbot.

micisse commented 4 years ago

Okay thank @nickjj !