concrete5-community/acme

A concrete5 8.5+ package to create and manage HTTPS certificates for your websites

acme's Issues

Add Certificate button doesn't show when there are no certificates

The script returns at line 104, so the <script> content never runs, and the elements with class .acme-loading-hide are never loaded

acme/single_pages/dashboard/system/acme/certificates.php

Line 104 in dc8ad64

return;

HTTP challenges can't be performed on wildcard domains.

Hello,

while adding wildcard domain, I get this error and there was no option to change the preferred challenges to DNS.

Please note I'm using cloudflare on the domain I'm trying to add.

Http*Challenge: checkConfiguration should ignore certificate verification errors

Reported on the Let's Encrypt community forums, it seems that the preflight performed for the HttpPhysicalChallenge runs, at least under some configurations, with CURLOPT_SSL_VERIFYHOST = 2.

This can be a problem if there a redirect to an HTTPS host that has e.g. a self-signed certificate.

Common implementations of RFC8555 (Boulder, Pebble) do not do any certification verification when encountering these kinds of redirects.

Since the preflight in checkConfiguration does perform certificate verification, it can prevent certificate issuance from succeeding where it would otherwise work just fine.

My suggestion would be to set it to 0 indiscriminately.