acme

Hello, I am trying to set up the ACME listener using HTTP but I keep getting validation failed connection refused. It looks like my server is not listening on port 80. When I do the following on the server itself pointing to it's own IP: nc 10.110.2.8 80 it returns connection refused. Any...

Hallo, Ich wollte bei mir heute ssl Zertifikate für alles einrichten, aber leider kommt bei mir dieser Fehler immer wenn ich per ACME ein Zertifikat ordern will. Hat Jemand eine idee was man noch probieren kann? 2024-03-31T10:34:35+02:00: Placing ACME order 2024-03-31T10:34:36+02:00: Order...

Hello, I haven't been playing with my Proxmox homelab in some time. I fired them back up to try and do some work and noticed the TLS certs had expired for my WebUI. Previously I was using ACME DNS challenges with LetsEncrypt to configure my SSL/TLS certs. So I figured I would remove all of the...

Summary already says it. We have a self-hosted ACME server (step-ca) and would like to include the non-FQDN hostname and its IP address as SANs for compatibility reasons How to accomplish that through native Proxmox features? https://pve.proxmox.com/pve-docs/pvenode.1.html doesn't appear to...

Hallo zusammen, aktuell nutze ich den Free (Legacy 2018) Plan von ClouDNS, damit schaffe ich es aber nicht eine ACME DNS Challenge durchzuführen. Angeblich sind die Credentials immer falsch. Ich habe nun mit dem Support geschrieben und obwohl ich einen API user anlegen kann, darf ich diesen...

Can someone help with what I'm missing here? Why is it telling me to create a CNAME in the ###### block and then telling me to create a TXT record but not telling me what to put into it?

I figured out to make my DC safer and add SSL cert for trusted https that is only accessible from LAN, with 2FA etc... however when pvenode acme cert order -f Can't use an undefined value as a HASH reference at /usr/share/perl5/PVE/API2/ACME.pm line 196. I never messed with certs before, this...

I'm in need of executing a script to allow traffic through firewall and open port 80 inbound to the PVE (and next PBS), and then once done, close the ports etc. Is there a current way to do it in PVE 7.x ?

I am using an ACME server other than Let's Encrypt, and I observe PVE is having issues creating the CSR for IP addresses. Depending of the order of the domains (the actual domain and the IP) to be verified I add in the GUI to be verified it creates a bad CSR that is not accepted by the ACME...

Hi how to automate the use of certificates that are issued by your local certification authority? deployed my center, I receive a certificate from it through certbot and it is located /etc/letsencrypt/live/%FQDN I wanted to put files from /etc/letsencrypt/live/%FQDN into /etc/pve/local through...

Hello, I want to ask you how to change the port of the HTTP daemon, which is started when the certificates order is triggered. I would prefer 8080 for example or whatever else. I am getting "Failed to initialize HTTP daemon" error at the end of the task because my 80 port is being used by...

I am currently unable to find ACME under the datacenter dashbaord of Proxmox 7.2.

Hello, I can't seem to find any doc or description of the format for supplying "API data" to an ACME dns-01 challenge using the Azure plugin. I'm asking about the expected format of the parameters that need to be passed to the plugin via this dialog: I tried using the CLI but it returns an...

I use a different hostname for SMTP and API/GUI. The certificates are separate. However, I want to understand what the best practice is because I may have done this reverse from what it should be. PMG IP: 192.0.2.1 The ACME settings are: mx.example.com -> smtp hostxyz123.example.com -> api...

I was able to successfully get a Lets Encrypt cert for my PVE box, using the domain: PVE.domain.com, but I am only able to access the server as such. If I connect to the server locally at https;//PVE:8006/, I get an err_cert_common_name_invalid error in chrome. Is there any way to add SANs to...

I'm using PVE's ACME client to get a certiifcate from my ACME server. I added two names: "domain.com" and "172.16.0.1" in the control panel. The certificate I finally got has its Subject Alternative Name = "DNS:domain.com,DNS:172.16.0.1". It's invalid. It should be...

For my internal PVE nodes I want to get ACME working. Since I'm behind a NAT firewall and the single IP's port 80 is not available, I'm trying with the DNS API challenge. Unfortunately, my own web hoster does not provide a DNS API, so I forwarded a subdomain to 1984.hosting, which has a built-in...

The title says pretty much it all. :) I'm writing an API client and a Terraform provider for Proxmox VE. So far the `version` and `storage` endpoints are working (albeit not necessarily complete :D ). I'm now trying to create an ACME account but I get a `403 Permission check failed (user !=...

Hello, Would it be possible to add the TLS-ALPN challange method to ProxMox's ACME implementation? I don't have the ability to use port 80 or DNS for one of my servers. https://github.com/acmesh-official/acme.sh/wiki/TLS-ALPN-without-downtime Thanks, Daniel

Hi, renewing of our let's encrypt certificates worked flawlessly until now. Any ideas what could have changed with the recent updates towards PVE 7.2 root@jupiter2:~# pvenode acme cert renew Loading ACME account details Placing ACME order Order URL...