ACME-DNS configuration problem

MasterPhi

Well-Known Member
Jan 7, 2019
51
9
48
34
Hi,

I was using acme.sh with crontab to renew my certificates, with PVE 6.2 I'm trying to let PVE to handle it but it doesn't work.

What I did:
  1. Datacenter -> ACME new plugin, named it to "dns"
  2. Choose acmedns
  3. In API data, I copied account.conf from acme.sh, removed quotes:
    Code:
    SAVED_ACMEDNS_UPDATE_URL=http://192.168.10.1:8081/update
    SAVED_ACMEDNS_USERNAME=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx
    SAVED_ACMEDNS_PASSWORD=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    SAVED_ACMEDNS_SUBDOMAIN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx

  4. In System -> Certificates, add domain, challenge type DNS, plugin "dns", and my domain name.
Got this error when I click renew:
Code:
The validation for xxxxxxxx.com is pending!
[Thu May 14 12:26:53 CEST 2020] Using acme-dns
[Thu May 14 12:26:54 CEST 2020] invalid response of acme-dns
[Thu May 14 12:26:54 CEST 2020] Error add txt for domain:_acme-challenge.xxxxxxxx.com
TASK ERROR: command 'setpriv --reuid nobody --regid nogroup --clear-groups --reset-env -- /bin/bash /usr/share/proxmox-acme/proxmox-acme setup acmedns xxxxxxxx.com' failed: exit code 1
 
please remove the 'SAVED_' prefix, the keys should be just 'ACMEDNS_UPDATE_URL' etc.
 
please remove the 'SAVED_' prefix, the keys should be just 'ACMEDNS_UPDATE_URL' etc.
That works !

But it doesn't like wildcards domains:
Code:
invalid format - value '*.xxxx.com' does not look like a valid domain name!
 
yes. wildcard support is not yet implemented but should follow soon.