Custom ACME URLs / External Accounts

[jamesharr]

Hi,

At work we have a provider other than LetsEncrypt providing our certificates. It requires us to specify a custom ACME server, a custom Key ID and HMAC-KEY. Our service doesn't require the do the domain assertion (DNS or otherwise). I think in some cases, certbot will "provide a challenge", but the cert provider doesn't actually check it because the Key-ID + HMAC-KEY provide the necessary authentication and assertion.

It's actually not clear to me if Proxmox-VE uses certbot under the hood.

Has anyone tried setting this up? If I wanted to submit this as a feature request, what kind of information should I provide?

Below is an example of what we get back from our provider when we create a new ACME account. It includes some example certbot flags.

 

[Machine Manager]

I was looking for the same answer, and I learned about this command:

pvenode acme account register default info@example.com --directory https://step-ca.host:9090/acme/acme/directory

 

[dharsan]

Hi,

At work we have a provider other than LetsEncrypt providing our certificates. It requires us to specify a custom ACME server, a custom Key ID and HMAC-KEY. Our service doesn't require the do the domain assertion (DNS or otherwise). I think in some cases, certbot will "provide a challenge", but the cert provider doesn't actually check it because the Key-ID + HMAC-KEY provide the necessary authentication and assertion.

It's actually not clear to me if Proxmox-VE uses certbot under the hood.

Has anyone tried setting this up? If I wanted to submit this as a feature request, what kind of information should I provide?

Below is an example of what we get back from our provider when we create a new ACME account. It includes some example certbot flags.
View attachment 40343

I don't think it's possible to add EAB to Proxmox RN. I tried working with ZeroSSL and it didn't work