Using an ACME server that doesn't provide a TOS - SOLVED

[dmshimself]

When using PVENODE to use an existing self hosted ACME server, in my case step-ca, I cannot seem to find an option to suppress the check for TOS. Is there a way to do this?

For example

pvenode acme account register

select custom, web site for CA then get an error as in:

Directory endpoints:
0) Let's Encrypt V2 (https://acme-v02.api.letsencrypt.org/directory)
1) Let's Encrypt V2 Staging (https://acme-staging-v02.api.letsencrypt.org/directory)
2) Custom
Enter selection: 2
Enter custom URL: https://xxxxxxxxxxx.com

Attempting to fetch Terms of Service from 'https://xxxxxxxxxxxx.com
Error: GET to https://xxxxxxxxxxx.com
404 page not found


Ideally there would be an option to not ask for the TOS and while the manual show options are available, I cannot seem to find what those are and if one includes suppressing the TOS check.

Edit - I mean to say that I had found an article:

https://forum.proxmox.com/threads/issue-while-adding-acme-account-with-custom-acme-directory.99102/

but that seems to indicate a fix has been applied to PBS and I'm using VE.

 

[fabian]

could you post the output of pvesh get /cluster/acme/meta --directory "URLOFYOURACMESERVER" --output-format json-pretty ?

 

[dmshimself]

Sure no problem. I've not shown the actual site name, but it was correct when I ran the command.

root@pvetest:~# pvesh get /cluster/acme/meta --directory "https://xxxxxxx" --output-format json-pretty
Error: GET to https://xxxxxxxxx
404 page not found

 

[fabian]

if the meta query already fails, then your URL is not correct.. or your CA is not ACME compliant

 

[dmshimself]

Aha! It turns out that the directory step-ca provides for ACME is something along the lines of

https://xxxxxxxx/acme/ACME/directory

and not the base CA connection.
Once I used that, all was well. My bad. Perhaps soemone else using step-ca might find the hint useful.

 

[fabian]

great! please mark the thread as solved (edit first post)