Saturday, September 01, 2018

acme-client agreement url in 6.3

Hey all,

i cant be able to get acme-client to work in 6.3 .

i get the same error with agreement url as
"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf" and
"https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf"

their is a error on his site,
https://github.com/kristapsdz/acme-client-portable/issues/51
Does anyone know what agreement url is offically supported/works with
openbsd 6.3?

server# acme-client -vv mail.example.com
acme-client: "agreement url" is deprecated.
acme-client: "agreement url" is deprecated.
acme-client: acme-client: acme-client:
/etc/ssl/private/mail.example.com.key: loaded RSA domain
key/etc/acme/letsencrypt-privkey.pem: loaded RSA account
key/etc/ssl/mail.example.com.crt: certificate valid: 120 days left

server# cat /etc/acme-client.conf

#
# $OpenBSD: acme-client.conf,v 1.4 2017/03/22 11:14:14 benno Exp $
#
authority letsencrypt {
agreement url
"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf"
#"https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf"
#"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf"
api url "https://acme-v02.api.letsencrypt.org/directory"
#"https://acme-v01.api.letsencrypt.org/directory"
account key "/etc/acme/letsencrypt-privkey.pem"
}

authority letsencrypt-staging {
agreement url
"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf" #
"https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf"
#"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf"
api url "https://acme-v02.api.letsencrypt.org/directory"
#"https://acme-staging.api.letsencrypt.org/directory"
account key "/etc/acme/letsencrypt-staging-privkey.pem"
}

domain mail.example.com {
domain key "/etc/ssl/private/mail.example.com.key"
domain certificate "/etc/ssl/mail.example.com.crt"
domain full chain certificate
"/etc/ssl/mail.example.com.fullchain.pem"
sign with letsencrypt
}
#

Take Care
Sincerly flipchan

No comments:

Post a Comment