0

I am currently using pfSense version 2.4.4-RELEASE-p3 and installed Acme v0.6.2.

I am trying to generate a letsencrypt certificate. The ACME Server is currently set to Let's Encrypt Staging ACME v2 The account key was generated and registered.

For the Domain SAN list I'm using the DNS-Cloudflare method.

It asks for the following information:

Cloudflare API Key: Global API Key?

Cloudflare API Email Address: Email address used to register for CloudFlare

Cloudflare API Token: API Token with rights to edit DNS Zone?

Cloudflare API Account ID: Not entirely sure what this field needs.

In the fourth column, it was my understanding this value could be obtained in the url of the cloudflare dashboard once signed in.

After saving the information and clicking renew I'm presented with the following:

UniqueDomain
Renewing certificate
account: UniqueDomain
server: letsencrypt-staging-2


/usr/local/pkg/acme/acme.sh --issue -d 'UniqueDomain.tld' --dns 'dns_cf' --home '/tmp/acme/UniqueDomain/' --accountconf '/tmp/acme/UniqueDomain/accountconf.conf' --force --reloadCmd '/tmp/acme/UniqueDomain/reloadcmd.sh' --log-level 3 --log '/tmp/acme/UniqueDomain/acme_issuecert.log'

Array
(
[path] => /etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin/
[PATH] => /etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin/
[CF_Key] => ####
[CF_Email] => name@email.com
[CF_Token] => ####
[CF_Account_ID] => ####
)
[Wed Sep 11 10:10:00 CDT 2019] Single domain='UniqueDomain.tld'
[Wed Sep 11 10:10:00 CDT 2019] Getting domain auth token for each domain
[Wed Sep 11 10:10:02 CDT 2019] Getting webroot for domain='UniqueDomain.tld'
[Wed Sep 11 10:10:02 CDT 2019] get to authz error.
[Wed Sep 11 10:10:02 CDT 2019] _authorizations_map='UniqueDomain.tld, {"identifier":{"type":"dns","value":"UniqueDomain.tld"},"status":"pending","expires":"2019-09-18T13:06:44Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/7932075/O89X2A","token":"vD5rLPVeh6CtbO1IznI3hYA4jKMFh9PJz4dRyUtBnGc"},{"type":"dns-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/7932075/--77kA","token":"vD5rLPVeh6CtbO1IznI3hYA4jKMFh9PJz4dRyUtBnGc"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/7932075/MzseAg","token":"vD5rLPVeh6CtbO1IznI3hYA4jKMFh9PJz4dRyUtBnGc"}]}
'
[Wed Sep 11 10:10:02 CDT 2019] Please check log file for more details: /tmp/acme/UniqueDomain/acme_issuecert.log

Is there something I am missing? Best I can tell all the entered information is correct. Any ideas?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.