How to use ACME-PS with SANs

[pkisharp]

How to use ACME-PS with SANs

[glatzert]

To be true, I think I never tried SAN, since we (University of Mainz in this case) are not using any. IIS with centralized certificate store does not work with a SANs, so our main use case did not require it (essentially it works, but is of little use). Nevertheless it's a valid issue, that this won't work. If you have the time, feel free to provide a fix, I'll happily deploy a next version. If not you probably need to wait until mid to late August, until I find the time to fix it and make the newer get-as-post available as well.

[glatzert]

Can you tell me, what line of your code throws the exception?

The error message says it's part of Get-ACMEChallenge, which is never called from the module itself, so it seems the error comes later?

[zoTT5301]

First of all my script begins with
using module ACME-PS

That offers the type "AcmeIdentifier" and is the only way to call the New-ACMEOrder type-conform with an AcmeIdentifier[] array.

# Build the array
[AcmeIdentifier[]] $ACMEIdentifiers = $NULL;
$ACMEIdentifiers +=$ACMEServerCN;

#Add SANs from a SAN string-array
foreach ($SAN in $LECERT_SANs) 
{
      $ACMEIdentifiers += New-ACMEIdentifier $SAN
}

# Create the order object at the ACME service.
$ACMEOrder = New-ACMEOrder $ACMEState  -Identifiers $ACMEIdentifiers;

# Fetch the authorizations for that order
$ACMEauthZ = Get-ACMEAuthorization  -Order $ACMEOrder;

# Select a challenge to fullfill
$ACMEChallenge = Get-ACMEChallenge $ACMEState $ACMEauthZ "http-01";

and here occurs the exception: Get-ACMEChallenge

That was my approach to place an order more than one Name for the Certificate.

I am also not sure how to get a wildcard-Certificate...

[glatzert]

Get-ACMEAuthorizations might return multiple authorizations for SAN.
foreach($authz in $acmeAuthz) {...} might solve your problem.

[glatzert]

Since I did not hear back anything by now, I'm closing this as done.

[asifma]

This works, just pipe it...:

$ACMEChallenge = $ACMEauthZ | Get-ACMEChallenge -State $ACMEState -Type "dns-01"