Project

General

Profile

Actions

Bug #8352

closed

Write certificates to file system after renew not working for ACME v2

Added by tasty ratz about 6 years ago. Updated about 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
ACME
Target version:
-
Start date:
02/28/2018
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

Using v2 acme servers, acme 0.2.1 package on 2.4.2-RELEASE-p1
Checking the box:
Write ACME certificates to /conf/acme/ in various formats for use by other scripts or daemons which do not integrate with the certificate manager.

Has no effect.
/conf/acme/ remains empty for some time after renewal for certificate use elsewhere.

I am using this for the new wildcard cert support, I have not tested this functionality in previous acme package versions prior to 0.2.1

Actions #1

Updated by Jim Pingle about 6 years ago

  • Status changed from New to Not a Bug

I have tried it on several systems running 0.2.1 and they all work fine, must be something in your specific setup. Please start a new thread on the forum, pfSense subreddit, or mailing list for assistance.

Actions #2

Updated by Jim Pingle about 6 years ago

  • Subject changed from Write certificates to file system after renew not working in 0.2.1. Possible regression on feature 7706 to Write certificates to file system after renew not working in for ACME v2
  • Status changed from Not a Bug to Assigned
  • Assignee set to Jim Pingle

This was a bug upstream in acme.sh that only affects ACME v2. After processing the certificates, the script unintentionally copied an already processed file over the top of another one that was already handled earlier in the code.

I entered an issue upstream ( https://github.com/Neilpang/acme.sh/issues/1330 ) and submitted a fix ( https://github.com/Neilpang/acme.sh/pull/1331 ) which has already been merged to master ( https://github.com/Neilpang/acme.sh/commit/464dc93751d45e6440ed510927eb1d03d964b734 )

Fix will be in the ACME package soon.

Actions #3

Updated by Jim Pingle about 6 years ago

  • Subject changed from Write certificates to file system after renew not working in for ACME v2 to Write certificates to file system after renew not working for ACME v2
Actions #4

Updated by Jim Pingle about 6 years ago

  • Status changed from Assigned to Feedback

Fixed in ACME package version 0.2.3

Actions #5

Updated by tasty ratz about 6 years ago

Jim Pingle wrote:

Fixed in ACME package version 0.2.3

I updated my package and confirmed this is resolved.
The certificate is now written to the directory as intended, & the CA is created successfully.
Thank you!

Actions #6

Updated by Jim Pingle about 6 years ago

  • Status changed from Feedback to Resolved

Thanks for testing!

Actions

Also available in: Atom PDF