[RFE] Add BuyPass as an ACME account

[CRCinAU]

The BuyPass Go SSL scheme uses the ACME protocol - like LetsEncrypt.

They offer free certs with a 180 cert lifetime.

Link: https://www.buypass.com/products/tls-ssl-certificates/go-ssl

The directory URL is: https://api.buypass.com/acme/directory

This should pretty much be a drop-in addition to the Lets Encrypt option that already exists.

 

[CRCinAU]

ping @t.lamprecht / @Stoiko Ivanov - just for visibility....

 

[t.lamprecht]

You can already register custom ACME endpoints using the pvenode CLI tool:
pvenode acme account register my-custom-endpoint mail@example.invalid

Select 2) Custom and enter the endpoint of the registries ACME directory.

And I don't think a longer validity is an actual improvement with ACME being, as the name suggests, automatic..

Oh and in general, please open enhancement request over at https://bugzilla.proxmox.com/

 

[CRCinAU]

You can already register custom ACME endpoints using the pvenode CLI tool:
pvenode acme account register my-custom-endpoint mail@example.invalid

Nice! I wasn't aware of this.... I managed to set it up using:

pvenode acme account register BuyPass mail@example.invalid -directory https://api.buypass.com/acme/directory

Then it appears in the Web UI.

I didn't manage to come across this in the documentation... Is it documented?

 

[t.lamprecht]

I didn't manage to come across this in the documentation... Is it documented?

Hardly, I opened an enhancement request for improving on that.

 

[CRCinAU]

Awesome - that would be great.

I found that IPv6 only hosts can't get certs from BuyPass - I've opened a ticket with them to see if they can fix that part.... but other than that, it all seems to work ok

 

[CRCinAU]

@t.lamprecht Is this expected to work on PMG also?

If I attempt to register via pmgconfig, I get the following:

# pmgconfig acme account register BuyPass mail@domain.com -directory https://api.buypass.com/acme/directory

Attempting to fetch Terms of Service from 'https://api.buypass.com/acme/directory'..
Terms of Service: https://api.buypass.com/acme/terms/1041
double free or corruption (!prev)
Aborted

EDIT: Thinking further, if this feature is present, it should probably work....

Filed: https://bugzilla.proxmox.com/show_bug.cgi?id=4979