Bookmyname certificate, tips for PVE and PBS

liane

Renowned Member
Nov 25, 2008
40
1
73
Since Acme released a bookmyname plugin at the end of 2023, it is now possible to use the user interface to manage certificates.

A few comments though: I had trouble getting it to work, and couldn't find much information here. After a lot of struggling, I put some debugging code in /usr/share/proxmox-acme/proxmox-acme to get a better idea of what it was doing. This is what happen:

Let's say you have this in the API Data field of the challenge plugin (Datacenter/ACME):
BOOKMYNAME_USERNAME="LOGIN-FREE"
BOOKMYNAME_PASSWORD="P@ssW0RD"
The URL used to access the Bookmyname API will be :
https://"LOGIN-FREE":"P@ssW0RD"@www.bookmyname.com/dyndns/?hostname=...
This is obviously wrong, and curl will fail with a code 3 error, so the first thing to do is remove the quotation marks.

Next thing, if you have a strong PASSWORD, for example with "@", you'll need to URL encode it, so that P@ssW0RD becomes P%40ssW0RD.
Then, the correct API data field will be :
BOOKMYNAME_USERNAME=LOGIN-FREE
BOOKMYNAME_PASSWORD=P%40ssW0RD

The last thing is that Bookmyname is a bit slow to update its DNS (~200s), so you'll need to change the Datacenter/ACME/Challenge plugin's default of 30s to over 200. To be on the safe side, I use 600 and it works fine.

The same applies to Proxmox Backup Server.