[SOLVED] Unable to request ACME certificate via EasyDNS API in PVE 8.2.2

txr13

New Member
May 16, 2024
5
0
1
Hi, I'm setting up my first Proxmox VE server and attempting to request a certificate via the EasyDNS API. I receive the following:
Code:
Loading ACME account details
Placing ACME order
Order URL: https://acme-v02.api.letsencrypt.org/acme/order/1729854477/269925480547

Getting authorization details from 'https://acme-v02.api.letsencrypt.org/acme/authz-v3/351523922817'
The validation for belial.*********.*** is pending!
[Thu May 16 12:13:03 PDT 2024] invalid domain
[Thu May 16 12:13:03 PDT 2024] Error add txt for domain:_acme-challenge.belial.*********.***
TASK ERROR: command 'setpriv --reuid nobody --regid nogroup --clear-groups --reset-env -- /bin/bash /usr/share/proxmox-acme/proxmox-acme setup easydns belial.*********.***' failed: exit code 1

I have confirmed that my EasyDNS API credentials are enabled for production. I have also confirmed that my API credentials work directly on rest.easydns.net, and do return valid records for my domain. I can also confirm that EasyDNS has logged no access to the API except the request I made directly through rest.easydns.net, suggesting Proxmox is not actually submitting any requests to the API.

How can I get more information on what the problem is?
 
Last edited:
Does anybody know how to troubleshoot ACME issues, maybe enable some sort of debug output?
 
Last edited:
For anybody coming after me, I finally figured it out.

I had my credentials set under Datacenter -> ACME in the following format:
Code:
EASYDNS_Token="xxxxxxxxxxxxxxx.xxxxxxxx"
EASYDNS_Key="apixxxxxxxxxxxxxx.xxxxxxxx"

This matches the documentation give at https://github.com/acmesh-official/acme.sh/wiki/dnsapi2#dns_easydns

Proxmox is choking on the quote characters. What worked for me was to set the credentials like this:
Code:
EASYDNS_Token=xxxxxxxxxxxxxxx.xxxxxxxx
EASYDNS_Key=apixxxxxxxxxxxxxx.xxxxxxxx