[SOLVED] ACME Renewals with Zilore DNS Error

[ilya_buryy]

Hi! PMG 8.0.7 (all updates). API key Zilore correct 100%.

I try order certificate, but error:

Loading ACME account details
Placing ACME order
Order URL: https://acme-staging-v02.api.letsencrypt.org/acme/order/******484/******52484

Getting authorization details from 'https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/*****88184'
The validation for pmg.*****.kz is pending!
/usr/share/proxmox-acme/proxmox-acme: line 792: export: `********-b5ab-****-83d7-00006b0b7ae0=': not a valid identifier
[Fri Dec 1 14:24:58 +06 2023] Using Zilore
[Fri Dec 1 14:24:58 +06 2023] Please define Zilore API key
[Fri Dec 1 14:24:58 +06 2023] Error add txt for domain:_acme-challenge.pmg.*****.kz
TASK ERROR: command 'setpriv --reuid nobody --regid nogroup --clear-groups --reset-env -- /bin/bash /usr/share/proxmox-acme/proxmox-acme setup zilore pmg.*****.kz' failed: exit code 1

Please help!

 

[Chris]

HI,
is the appended = as shown in the error output part of your key?

 

[ilya_buryy]

Hi, Chris! No.

 

[Chris]

Hi, Chris! No.

View attachment 59096

Please verify also the content of cat /etc/pve/priv/acme/plugins.cfg.

 

[ilya_buryy]

Chris, PVE?

data = api key Zilore?

 

[Chris]

Chris, PVE?

data = api key Zilore?

View attachment 59099

Ah yes, sorry the path should of course be for pmg in your case, I was quickly testing on PVE as the code is shared in between products here.
The value stored as data should be the base64url encoded representation of your api key. Most importantly, the value given to data should not end with any =. Is that the case?

 

[ilya_buryy]

Ah yes, sorry the path should of course be for pmg in your case, I was quickly testing on PVE as the code is shared in between products here.
The value stored as data should be the base64url encoded representation of your api key. Most importantly, the value given to data should not end with any =. Is that the case?

That's right. I double-checked the value with Base64URL Decode. Values are consistent with and without =

 

[Chris]

Oh, also note, you will have to provide the credentials as KEY=VALUE in the API Data input field, maybe that is your issue here? Did you only insert the value? See https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#sysadmin_certs_acme_dns_challenge

 

[ilya_buryy]

Oh, also note, you will have to provide the credentials as KEY=VALUE in the API Data input field, maybe that is your issue here? Did you only insert the value? See https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#sysadmin_certs_acme_dns_challenge

I've been certified before. The reissue didn't work for me. I'm trying to get it again and there's an error.

 

[Chris]

I've been certified before. The reissue didn't work for me. I'm trying to get it again and there's an error.

So this is a new issue then? The missing KEY=VALUE solved the problem?

What error do you get?

 

[ilya_buryy]

For the test. If I delete a value from the API Data field, I see an error:

Loading ACME account details
Placing ACME order
Order URL: https://acme-staging-v02.api.letsencrypt.org/acme/order/*******/*********


Getting authorization details from 'https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/********'
The validation for pmg.*****.kz is pending!
[Fri Dec  1 18:45:39 +06 2023] Using Zilore
[Fri Dec  1 18:45:39 +06 2023] Please define Zilore API key
[Fri Dec  1 18:45:39 +06 2023] Error add txt for domain:_acme-challenge.pmg.******.kz
TASK ERROR: command 'setpriv --reuid nobody --regid nogroup --clear-groups --reset-env -- /bin/bash /usr/share/proxmox-acme/proxmox-acme setup zilore pmg.*******.kz' failed: exit code 1

That's normal.

I'm returning a value API Data. Error. There's an extra = sign from somewhere

 

[Chris]

For the test. If I delete a value from the API Data field, I see an error:

You will have to provide some form of API authentication, otherwise it will of course not work.

I'm returning a value API Data. Error. There's an extra = sign from somewhere

I suspect that the extra = is given because your data is not correctly given in the form KEY=VALUE and the _load_plugin_config [0], which expects this splits on = and then exports it as such.

[0] https://git.proxmox.com/?p=proxmox-...725d6be4261f14a746cc7e94a1fbfc61;hb=HEAD#l784

 

[ilya_buryy]

And how do I fix it? Order a commercial certificate?)

 

[ilya_buryy]

A similar problem was evident in PVE 8.1.3. I thought there was a problem with the API and wrote to support Zilore.
RE:
It looks like you're using an external plugin, which we unfortunately don't support.

 

[Chris]

Does your API key work when using e.g. acme.sh [0]?
You did not reply to the question if you have filled the API data text-field in the expected KEY=VALUE manner, is that the case?

[0] https://github.com/acmesh-official/acme.sh

 

[ilya_buryy]

Hi, Chris!
It's working! Thanks for your help!
For Zilore:
API Data: Zilore_Key=************

 

[Chris]

Glad it works, please mark this thread as solved, thx!