ACME method for ddns.net or freemyip.com

chudak

Anybody knows how to configure ACME method for domain names by ddn.net (no-ip.org) or freemyip.com ?

Thx

Gertjan

If a method exist for "ddn.net (no-ip.org) or freemyip.com", then a (compatible) method should exist here : https://github.com/Neilpang/acme.sh/tree/master/dnsapi

Next best : ddn.net (no-ip.org) or freemyip.com could tell you about it.

chudak

@gertjan

Thank you.
I think I have an extra trouble to address - I wanted to use CA on my local network pfSense router, but I guess I need to do something extra to have certificate issued, e.g. open port 80 etc...

Gertjan

@chudak said in ACME method for ddns.net or freemyip.com:

e.g. open port 80 etc...

Ah, the local "webroot" method.
See https://www.netgate.com/docs/pfsense/certificates/acme-validation.html#ftp-webroot
Which implies you have a web server behind pfSense on one of it's LAN(s).
(using the pfSense GUI as the web server is not - underlined not - advisable - see link for the why part).

A domain registrar with some 'basic' DNS facilities (see the acme method list) is by far the best solution.
nsupdate will do it's job just fine then. A real "set it and forget it" - and have new certificate every 60 days you doing nothing.

chudak

@gertjan

Thanks for warning, copy !

I deployed self-signed CA via pfSense CA Manager and I guess can be satisfied with that for now :)

chudak

@gertjan said in ACME method for ddns.net or freemyip.com:

@chudak said in ACME method for ddns.net or freemyip.com:

e.g. open port 80 etc...

Ah, the local "webroot" method.
See https://www.netgate.com/docs/pfsense/certificates/acme-validation.html#ftp-webroot
Which implies you have a web server behind pfSense on one of it's LAN(s).
(using the pfSense GUI as the web server is not - underlined not - advisable - see link for the why part).

A domain registrar with some 'basic' DNS facilities (see the acme method list) is by far the best solution.
nsupdate will do it's job just fine then. A real "set it and forget it" - and have new certificate every 60 days you doing nothing.

@gertjan
Am I understanding correctly that I would need to enable sftp or ftps on my pfsense router in order to use this ?

Thx

Gertjan

@chudak said in ACME method for ddns.net or freemyip.com:

Am I understanding correctly that I would need to enable sftp or ftps on my pfsense router in order to use this ?

Well ... I never used the webroot method but pfSense has all on board to handle the file transfer.
I guess it will ask your for credentials needed, so it can login on the the remote (on a pfSense LAN or OPTx interface) (web) server so it can place the files in the web server root.