Todo #16382
open
Remove deprecated Buypass ACME server support
0%
Description
Unfortunatly Buypass is shutting down it's TLS/SSL certificate issuing service; https://www.buypass.no/produkter/tls-ssl-sertifikater/avvikler-utstedelse-av-tls-ssl-sertifikater (in Norwegian). This also includes it's ACME TLS/SSL certificate issuing; https://community.buypass.com/t/y4y130p (in English), quoting:
"Buypass Terminates Issuance of GoSSL Certificates
As of 15 October 2025, Buypass will no longer issue TLS/SSL Certificates, including GoSSL Certificates.
We will accept applications for GoSSL Certificates until 15 October 2025. Certificates issued prior to this date will remain valid until they expire or are revoked.
Revocation services (including revocation using the ACME protocol) and certificate status services (CRL and OCSP) will be operational for all Certificates throughout their validity period.
Be aware that ARI may not be reliable during the termination period as we are not able to issue renewals beyond 15 October 2025. This depends on the client-side implementation of ARI and should be evaluated.
Background for the Decision
There are several factors that together make it no longer commercially viable for Buypass to continue services related to TLS/SSL Certificates. The decision is based on a comprehensive assessment of the market situation and the regulatory framework for certificate issuance.
Detailed timeline
From 15 September 2025 it will no longer be possible to register new ACME Accounts.
From 15 October 2025 it will not be possible to apply for Certificates, but other ACME services (e.g. revocation) will still be operational. The ARI end point will be terminated.
By 15 April 2026 all GoSSL Certificates have expired, and the ACME service will be terminated."
Buypass ACME support which was added in https://redmine.pfsense.org/issues/9257 and fixed in https://redmine.pfsense.org/issues/9340 should be removed.
Updated by Jim Pingle 24 days ago
- Subject changed from buypass to shutdown TLS/SSL certificate issuing to Remove deprecated Buypass ACME server support
- Priority changed from Normal to Low
We are aware (See https://forum.netgate.com/topic/198512/heads-up-buypass-is-shutting-down-their-acme-service ) -- but if someone is using it, it will continue to work until the renewals stop. Removing it immediately could unnecessarily break someone's setup before they have a chance to migrate.
So while this does need to happen eventually, it must not be removed until after October 15th at the earliest.
Updated by Idar Lund 24 days ago
Jim Pingle wrote in #note-1:
We are aware (See https://forum.netgate.com/topic/198512/heads-up-buypass-is-shutting-down-their-acme-service ) -- but if someone is using it, it will continue to work until the renewals stop. Removing it immediately could unnecessarily break someone's setup before they have a chance to migrate.
So while this does need to happen eventually, it must not be removed until after October 15th at the earliest.
yeah, that's why I added the timeline in the report :)
Updated by Kris Phillips 19 days ago
- Status changed from New to Confirmed
- Plus Target Version set to 25.11
Updating status to Confirmed for now and updating Target Version to 25.11, as that should be in November beyond this timeline.
Updated by Jim Pingle 19 days ago
- Tracker changed from Regression to Todo
- Status changed from Confirmed to New
- Plus Target Version deleted (
25.11)
It does not need to be aligned with any version, it will happen when it's time for it to happen. It's not a bug or regression, it's a todo item, it doesn't need confirmation.