Bug #16916
closed
Mixed ACME certificate renewal button gets "Issue/Renew" label and only ever sends "--issue"
0%
Description
When trying to renew a certificate issued to more than one domain where one of the methods is DNS-Manual and the other method is DNS-Cloudflare (or any other fully-automated service), the two separate "Issue" and "Renew" buttons on the Certificates tab get changed to a single "Issue/Renew" button. However, this only sends a "/usr/local/pkg/acme/acme.sh --issue" version of the command, and this fails to renew the DNS-Manual version of the certificate.
I have confirmed this by ensuring that the TTL for the requested TXT record has expired, checked and confirmed the issued TXT record from a nslookup, and finally performed the manual command through the command line replacing --issue with --renew where the command worked as expected.
Updated by Jim Pingle 7 days ago
- Status changed from New to Rejected
I don't think this is going to be viable to work around. DNS-manual usage is rare and already heavily discouraged, I don't think it's worth adding more overhead and technical debt to support expanding its use.
We can't check for and exclude every set of incompatible methods, and you could always split that into separate certificates that don't mix types.