Comments (5)
Ah sorry, forgot to close the loop here - your PR #71 fixed the issue for me since I am now able to use my predefined eab credentials. Thanks for your help!
from lua-resty-acme.
This is the invocation of the lua-resty-acme
library that the kong
plugin is performing. I hope this helps to provide clarity on my approach.
The kong plugin invokes this acme library as follows:
https://github.com/Kong/kong/blob/master/kong/plugins/acme/client.lua#L108
acme_client, err = acme.new({
account_email = conf.account_email, -- my email
account_key = account.key,
api_uri = url, -- "https://acme.zerossl.com/v2/DV90"
storage_adapter = storage_full_path,
storage_config = conf.storage_config[conf.storage],
eab_kid = conf.eab_kid, -- nil
eab_hmac_key = conf.eab_hmac_key, -- nil
-- challenge_start_callback = ...
preferred_chain = conf.preferred_chain, -- nil
})
https://github.com/Kong/kong/blob/master/kong/plugins/acme/client.lua#L129
acme_client:init()
acme_client:new_account()
acme_client:order_certificate(key, host)
from lua-resty-acme.
Hi @johnfishbein thanks for the detailed report. It does seem the logic to handle predefined eab crendential is wrong. You can let the library to create it for you at present, you should still be able to see the certs in zerossl dashboars as long as you use the corresponding email to login.
The \/
is json's escape logic, it's same as / when decoded. So I'm not sure how/why zerossl returns this error; my previous experience is that zerossl has some hidden "limits" on the newAccount
API, it returns sometimes 500 sometimes others, even though a different acme client is used. But you can try swap the account private key, that seems to clear the "limit".
from lua-resty-acme.
@fffonion Thanks for your response - I will try swapping the account_key
as suggested.
from lua-resty-acme.
Closing as inactivity, please reopen if needed : )
from lua-resty-acme.
Related Issues (20)
- 按照Synopsis的步骤操作之后,没有生效,访问网站发现使用的是fallback证书,如何查找原因呢? HOT 4
- During renewal, errors on list() operation from consul storage is not logged: instead results in runtime error
- dns-01 challenge HOT 3
- How do I use ZeroSSL? HOT 3
- Error while trying to use subdomain with "_" simbol HOT 2
- How to use it? HOT 3
- -
- - HOT 1
- How to configure other storage configs when in DB-less? HOT 2
- Zerossl config api_uri but error ngx.timer HOT 5
- Storage adapter not connect redis HOT 1
- -
- BoringSSL not working HTTP3 HOT 2
- error during acme login HOT 2
- get_certkey_parsed: Pass stale certificate if getting certificate from storage fails HOT 2
- Problem with update locks HOT 4
- Option to delete none whitelisted domains in certificate update HOT 2
- Check cache from domain_whitelist_callback? HOT 7
- Ability to block the first request until certs are created? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from lua-resty-acme.