forked from veeti/manuale
-
Notifications
You must be signed in to change notification settings - Fork 7
Authorize multiple hostnames at once, issue certificates one by one (order file not found) #45
Copy link
Copy link
Open
Labels
bugSomething isn't workingSomething isn't working
Milestone
Description
With manuale it was possible to authorize multiple hostnames at once and issue certificates one by one. On automatoes the below happens (slightly edited to condense and hide the actual domains used):
$ manuale authorize foo.example.com bar.example.com quux.example.com Candango Automatoes 0.9.1. Manuale replacement. Authorizing foo.example.com, bar.example.com, quux.example.com. Requesting challenge for foo.example.com. Requesting challenge for bar.example.com. Requesting challenge for quux.example.com. DNS verification required. Make sure these TXT records are in place: _acme-challenge.foo.example.com. IN TXT "KT..." _acme-challenge.bar.example.com. IN TXT "WW..." _acme-challenge.quux.example.com. IN TXT "KV..." Press Enter to continue. foo.example.com: waiting for verification. Checking in 5 seconds. foo.example.com: OK! Authorization lasts until 2020-06-13T22:37:49Z. bar.example.com: waiting for verification. Checking in 5 seconds. bar.example.com: OK! Authorization lasts until 2020-06-13T22:37:49Z. quux.example.com: waiting for verification. Checking in 5 seconds. quux.example.com: OK! Authorization lasts until 2020-06-13T22:37:49Z. 3 domain(s) authorized. Let's Encrypt! $ $ manuale -v issue foo.example.com Candango Automatoes 0.9.1. Manuale replacement. Orders path found at /path/to/my/orders. Searching order file /path/to/my/orders/<hash>/order.json. ERROR: Order file not found. Please run before: manuale authorize foo.example.com $It appears the hash used in constructing the orders file path is made from all the hostnames in the authorization phase. Thus the orders are not found when trying to request a certificate for only one of the names because the hash is not the same. If the ACME v2 API allows breaking up authorizations made at once into multiple different certs, it would be nice if automatoes also supported that.
-- oh2kku
See cache at: https://web.archive.org/web/20200930225633/https://github.com/candango/automatoes/issues/45
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working