acme

Hello, I created a file /usr/share/proxmox-acme/lebureaunsupdate.key with the content : ``` key "update" { algorithm hmac-sha512; secret "AAA/MY/SECRET/AAA=="; }; ``` and I filed the acme plugin like that but when I try to order a certificate, I get the following error : ```...

Hello ! so it seems I will not be able to access my home lab from outside through TalkTalk eero unless it is deemed 'secure enough'. I have followed all the steps necessary to configure ACME. My domain is with OVH. API Key has been configured and given PUT, GET, POST and DELETE permissions to...

Hello! I downloaded and started using the Proxmox Mail Gateway 8.1 software. In the Configuration/Certificates menu, ACME has 5 domains created and it won't let me add more, but I don't get any error messages. Is this a bug or a limitation of the free version? Best regards, Zoltan

I use the smallstep step-ca ACME server from https://smallstep.com/docs/step-ca/ up and running. I have added the root and intermediate certificates to /usr/share/ca-certificates on my PVE node, and run update-ca-certificates I can succesfully run curl with curl...

My acme certificates are managed by my OPNsense VM and I have successfully used a plugin supplied by them to install certificates on the PVE servers via the API at https://${_target_hostname}:${_target_port}/api2/json/nodes/${_node_name}/certificates/custom Is there a way to do the same thing...

Hello all: As I rebuilt my Proxmox cluster from scratch, I attempted to configure ACME certificates for the first time. I had no issues and got all (3) nodes working initially. The following day, I could not log into nodes 2 and 3 via the UI but could via SSH. The only change was that the ACME...

When I try to add a new ACME account for PBS I am unable to register a new account, from my reading on various forum posts here I should only be utilising the default account via the CLI only (as the option is missing from the GUI, I've also tried other combinations of accounts and emails) and...

Hi! We use Sectigo [1] for our x509 certs. They offer no challenge based system for ACME. We use accounts instead. I can setup an account in PVE config System/Certificates but cannot use it since I have to chose between DNS and HTTP challenge to add a certificate. Both are not an option. Please...

netstat -tulpn Find app use 80 port If you dont use this, stop service, or change used port. service nginx stop Go to node > acme > Order certificate now

For anyone using Hurricane Electric's dynamic DNS records in https://dns.he.net/, here is an ACME DNS API plugin script for PVE: https://github.com/markkuleinio/pve-acme-he-ddns If I have understood it correctly, Proxmox will update their own proxmox-acme repo from acme.sh repo in GitHub, so...

I have several proxmox servers, bahind a firewall, and ha proxy. Each proxmox server has a public dns entry. I'm forwarding .well-known/acme-challenge via ha proxy, to each of my proxmox servers (hdr(host) -i proxmox1.example.com). I can run manually certbot successfully. When I try a pvenode...

I am using my selfhosted smallstep server to issue certificates for everything in my homelab. By design, the certificates are short-lived (only 24 hours). I have managed to request the certificate just fine via proxmox, and the auto renewal process seems to work fine. However, when the proxmox...

Hallo! Hab mir gerade die ACME-Implementierung von Proxmox 8.2.2 angeschaut. Wenn ich die Doku richtig verstanden habe, dann wird das zunächst nur zur Absicherung der Promox Admin-Seite genutzt. (Also z.B. https://mein.pve.com:8006/.) Ist es denn möglich, die bezogenen Zertifikate auch den...

Since Acme released a bookmyname plugin at the end of 2023, it is now possible to use the user interface to manage certificates. A few comments though: I had trouble getting it to work, and couldn't find much information here. After a lot of struggling, I put some debugging code in...

Hi - I'm running Proxmox 8.2.2 and running into the following odd error trying to provision certificates using the Namecheap ACME DNS Plugin. I believe this same configuration worked prior to the 8.2 upgrade within the last monthacme Under Datacenter -> ACME, I've defined a challenge plugin...

I sucessfully set up acme certificate on our proxmox node but certificate renew fails. Output of pvenode acme cert renew: Loading ACME account details Placing ACME order Order URL: https://acme-v02.api.letsencrypt.org/acme/order/1446374306/265127774607 Getting authorization details from...

Hello, I am trying to set up the ACME listener using HTTP but I keep getting validation failed connection refused. It looks like my server is not listening on port 80. When I do the following on the server itself pointing to it's own IP: nc 10.110.2.8 80 it returns connection refused. Any...

Hallo, Ich wollte bei mir heute ssl Zertifikate für alles einrichten, aber leider kommt bei mir dieser Fehler immer wenn ich per ACME ein Zertifikat ordern will. Hat Jemand eine idee was man noch probieren kann? 2024-03-31T10:34:35+02:00: Placing ACME order 2024-03-31T10:34:36+02:00: Order...

Hello, I haven't been playing with my Proxmox homelab in some time. I fired them back up to try and do some work and noticed the TLS certs had expired for my WebUI. Previously I was using ACME DNS challenges with LetsEncrypt to configure my SSL/TLS certs. So I figured I would remove all of the...

Summary already says it. We have a self-hosted ACME server (step-ca) and would like to include the non-FQDN hostname and its IP address as SANs for compatibility reasons How to accomplish that through native Proxmox features? https://pve.proxmox.com/pve-docs/pvenode.1.html doesn't appear to...