Solved Acme.sh setup

[Mwh65]

FreeBsd 12.3-RELEASE-p6, Apache 2.4.54

So I've finally taken the plunge to replace the problematic security/py-certbot for fetching / installing my domains certificate. I've successfully installed security/acme.sh, registered an account and issued one certificate for multiple domains.

To check all is well I issued acme.sh --renewall --renew-hook "service apache2 force-reload" in the CLI which rightfully enough output the following ...

[Fri Oct 14 16:32:00 BST 2022] Renew: 'golfladders.co.uk'
[Fri Oct 14 16:32:00 BST 2022] Skip, Next renewal time is: 2022-12-12T17:06:12Z
[Fri Oct 14 16:32:00 BST 2022] Add '--force' to force to renew.
[Fri Oct 14 16:32:00 BST 2022] Skipped golfladders.co.uk

However I then added the following CRON ...

/usr/local/sbin/acme.sh --cron --home /var/db/acme/.acme.sh > /var/log/acme.cron.log

ran it to test and the log only contains this ...

[Fri Oct 14 16:30:48 BST 2022] ===Starting cron===
[Fri Oct 14 16:30:48 BST 2022] ===End cron===

which to me looks like it did nothing. Can anyone shed any light on this as I must have missed something here.

 

[vienuolis]

You could raise error_level to see debug info in /var/log/acme.sh.log.

Also bear in mind that ~/.acme.sh/acme.sh should run as your user, not root.

 

[Mwh65]

I managed to solve the issue. Realised that the --home directory was wrong and all is working well now.

 

[jasonhirsh]

I managed to solve the issue. Realised that the --home directory was wrong and all is working well now.

what Is correct? I am looking at this for a replacement for cerbot

 

[mstiller]

what Is correct? I am looking at this for a replacement for cerbot

You can have a look at lego as a replacement for certbot.

 

[drhowarddrfine]

what Is correct? I am looking at this for a replacement for cerbot

Are you looking to fix it or replace it?

Why would you want to replace it? Has been working great for me for the who-knows-how-many-years I've been using it.

 

[jasonhirsh]

Are you looking to fix it or replace it?

Why would you want to replace it? Has been working great for me for the who-knows-how-many-years I've been using it.

looks little complicated for my level. Heck I managed to break letsencrypt and certbot. But thanks!!

 

[drhowarddrfine]

jasonhirsh Are you following the certbot guide ?

 

[jasonhirsh]

I have been in touch with their support area. This is a self inflicted wound

their response

 

[vienuolis]

Acme.sh is a much leaner yet more capable script that works with SSL.com, Google, ZeroSSL and any other RFC8555-compliant CA, not just with Let's Encrypt.

 

[jasonhirsh]

Thanks I will look in to it. I sort have ssl uo with openssl. with a self signed certificate. Having sent all my clients away because of my issue. I am just back into a learning Mode in so far as I can learn

 

[jasonhirsh]

I managed to solve the issue. Realised that the --home directory was wrong and all is working well now.

still curious as to what is correct directory

 

[jasonhirsh]

Acme.sh is a much leaner yet more capable script that works with SSL.com, Google, ZeroSSL and any other RFC8555-compliant CA, not just with Let's Encrypt.

all for $$$$
Guess you have to Pau to play

 

[vienuolis]

all for $$$$

No, not all the services are solely commercial. ZeroSSL (default in Acme.sh) supports three domains for free. You can however acme.sh --set-default-ca --server letsencrypt.

 

[scottro]

Mwh65, why don't you post what the correct entry is? As you can see, there are some who would like to know what was wrong. I remember an old cracked.com article where they talk about searching for a fix to any problem, finally find someone who had the same problem, and eagerly read the thread to see, "Never mind, fixed it." While the author of the article said that the problem now changes to hunting said poster down and killing them, it was a humor article--this was before cracked sold out to a big company and fired all their writers.