ACME Status 405

[mbfound]

Hi,

Trying to add certificates to a node and followed the guide at https://pve.proxmox.com/wiki/Certificate_Management but I get an error as soon as I try ordering the certificate.

Error is as follows:

~# pvenode acme cert order
Loading ACME account details
Placing ACME order
Order URL: https://acme-staging-v02.api.letsencrypt.org/acme/order/11768845/65417511

Getting authorization details from 'https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/26528299'
Error: GET to https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/26528299 {   "type": "urn:ietf:params:acme:error:malformed",   "detail": "Method not allowed",   "status": 405 }
Task Error: GET to https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/26528299 {   "type": "urn:ietf:params:acme:error:malformed",   "detail": "Method not allowed",   "status": 405 }

Port 80 is accessible and I even added an accept all to the firewall, there is nothing else running on port 80. Node has a public IP and I did say yes to the ToS. Firewall on the Node itself is off.

I have 3 other nodes I also tried it on, via the GUI or CLI and I still get the same error.

Any idea what might be wrong?

TIA

 

[Alwin]

Any idea what might be wrong?

The GET call to the API might not be allowed anymore. Try to change the ACME Directory.

 

[fabian]

https://community.letsencrypt.org/t...tion-of-unauthenticated-resource-gets/74380/4

we'll update our ACME client soon. the production API should be unaffected.

 

[Mykh]

Team, I'm getting the same type of error. Is the issue with client still exists?

Loading ACME account details
Placing ACME order
Order URL: https://acme-staging-v02.api.letsencrypt.org/acme/order/12936901/82988496

Getting authorization details from 'https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/47267368'
... pending!
Setting up webserver
Triggering validation
Sleeping for 5 seconds
TASK ERROR: validating challenge 'https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/47267368' failed

{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Method not allowed",
  "status": 405
}

The issue got resolved. Comcast was blocking DNS resolution for my IP. I found another way to bypass it.

 

[RoyK]

I'm seeing this too. Any chance of fixig it? I could use dns auth, but which plugin should I use with regular dynamic dns (bind9) and keys for authorized hosts for updates. How can I use this with proxmox?

 

[fabian]

https://pve.proxmox.com/pve-docs/pve-admin-guide.html#sysadmin_certificate_management - see "ACME Plugins"
https://github.com/acmesh-official/acme.sh/wiki/dnsapi#how-to-use-dns-api