ACME Let's Encrypt und DNS bei Selfhost

TFrenz

Member
May 13, 2020
96
7
13
58
Nachdem ich den RID2 mit gleicher ID eingetragen habe funktioniert alles.
Danke
 

Hellmann

New Member
Jan 5, 2022
4
0
1
33
Moin, wäre es möglich dein Plugin für strato zu nutzen? Hat jemand damit Erfahrungen?
 

TFrenz

Member
May 13, 2020
96
7
13
58
Hallo,
habe nun auf einem 2.ten MTA die Änderungen durchgeführt.
Bekomme aber beim Ausstellen des Zertifikates folgenden fehler:

Code:
Loading ACME account details
Placing ACME order
Order URL: https://acme-v02.api.letsencrypt.org/acme/order/119126600/102905354286

Getting authorization details from 'https://acme-v02.api.letsencrypt.org/acme/authz-v3/125874739446'
The validation for mta.zzzz.de is pending!
[Fri Jul  1 21:03:12 CEST 2022] Calling acme-dns on selfhost
[Fri Jul  1 21:03:12 CEST 2022] Trying to add DT8yKNggaJmmIK49AJRt3yog2LCrC7dFv2dsQI8BE2E on selfhost for rid: 3041444
Add TXT record: _acme-challenge.mta.zzzz.de
Sleeping 30 seconds to wait for TXT record propagation
Triggering validation
Sleeping for 5 seconds
[Fri Jul  1 21:03:48 CEST 2022] It seems that your api file is not correct, it must have a function named: dns_selfhost_rm
command 'setpriv --reuid nobody --regid nogroup --clear-groups --reset-env -- /bin/bash /usr/share/proxmox-acme/proxmox-acme teardown selfhost mta.zzzz.de' failed: exit code 1

TASK ERROR: validating challenge 'https://acme-v02.api.letsencrypt.org/acme/authz-v3/125874739446' failed - status: invalid, DNS problem: NXDOMAIN looking up TXT for _acme-challenge.mta.zzzz.de - check that a DNS record exists for this domain

auf dem ersten MTA gibt es auch keine dns_selfhost_rm Datei

Der DNS-Eintrag wird richtig gesetzt bei Selfhost.
An was kann es liegen?
 
Jan 16, 2020
82
12
13
25
Oh, sorry. falscher Branch, (die aktuelle Version gibts nur im dev)

cd /usr/share/proxmox-acme/dnsapi/
wget https://raw.githubusercontent.com/Marvo2011/acme.sh/dev/dnsapi/dns_selfhost.sh

Edit: Sieht so aus als wäre die acme Version in Proxmox etwas zu alt.
Folgende Zeilen müssen Auskommentiert werden:
(Zeile 22 - 25)
Code:
  #_getdeployconf SELFHOSTDNS_MAP
  #_getdeployconf SELFHOSTDNS_RID
  #_getdeployconf SELFHOSTDNS_RID2
  #_getdeployconf SELFHOSTDNS_LAST_SLOT

(Zeile 76-79)
Code:
  #_savedeployconf SELFHOSTDNS_MAP "$SELFHOSTDNS_MAP"
  #_savedeployconf SELFHOSTDNS_RID "$SELFHOSTDNS_RID"
  #_savedeployconf SELFHOSTDNS_RID2 "$SELFHOSTDNS_RID2"
  #_savedeployconf SELFHOSTDNS_LAST_SLOT "$SELFHOSTDNS_LAST_SLOT"
 
Last edited:

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!