ACME-DNS configuration problem

[MasterPhi]

Hi,

I was using acme.sh with crontab to renew my certificates, with PVE 6.2 I'm trying to let PVE to handle it but it doesn't work.

What I did:

1. Datacenter -> ACME new plugin, named it to "dns"
2. Choose acmedns
3. In API data, I copied account.conf from acme.sh, removed quotes:
   

   SAVED_ACMEDNS_UPDATE_URL=http://192.168.10.1:8081/update
   SAVED_ACMEDNS_USERNAME=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx
   SAVED_ACMEDNS_PASSWORD=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
   SAVED_ACMEDNS_SUBDOMAIN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx

   
   
4. In System -> Certificates, add domain, challenge type DNS, plugin "dns", and my domain name.

Got this error when I click renew:

The validation for xxxxxxxx.com is pending!
[Thu May 14 12:26:53 CEST 2020] Using acme-dns
[Thu May 14 12:26:54 CEST 2020] invalid response of acme-dns
[Thu May 14 12:26:54 CEST 2020] Error add txt for domain:_acme-challenge.xxxxxxxx.com
TASK ERROR: command 'setpriv --reuid nobody --regid nogroup --clear-groups --reset-env -- /bin/bash /usr/share/proxmox-acme/proxmox-acme setup acmedns xxxxxxxx.com' failed: exit code 1

 

[fabian]

please remove the 'SAVED_' prefix, the keys should be just 'ACMEDNS_UPDATE_URL' etc.

 

[MasterPhi]

please remove the 'SAVED_' prefix, the keys should be just 'ACMEDNS_UPDATE_URL' etc.

That works !

But it doesn't like wildcards domains:

invalid format - value '*.xxxx.com' does not look like a valid domain name!

 

[fabian]

yes. wildcard support is not yet implemented but should follow soon.

 

[pavels]

yes. wildcard support is not yet implemented but should follow soon.

Great! Related topic: https://forum.proxmox.com/threads/wildcard-certificate.69800/