Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ACME DNS API support

    ACME
    2
    5
    612
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JeGrJ
      JeGr LAYER 8 Moderator
      last edited by

      Hi,

      would it be possible to include the

      https://github.com/acmesh-official/acme.sh/wiki/dnsapi#45-use-acme-dns-api

      ACME DNS API tool as supported DNS validation variant? Currently we seem to have trouble renewing certificates with various other methods and wanted to try it as we already have a self-hosted instance running.

      Is there any chance? Doesn't seem overly complex with those 3 Variables the API is using?

      Cheers
      \jens

      Don't forget to upvote πŸ‘ those who kindly offered their time and brainpower to help you!

      If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

      J 1 Reply Last reply Reply Quote 1
      • J
        jrey @JeGr
        last edited by

        @JeGr

        Screen Shot 2023-12-20 at 6.24.51 AM.png

        Might need to provide a little information / clarity. renewal with RFC 2136 works.

        What do you mean "self-hosted instance running" ?

        JeGrJ 1 Reply Last reply Reply Quote 0
        • JeGrJ
          JeGr LAYER 8 Moderator @jrey
          last edited by

          @jrey It's all mentioned above. I was not talking about DDNS but about the ACME package (as we are in that subforum) and the DNS validation method of ACME-DNS to use. That is one of the methods supported by acme.sh (as is shown in the link I supplied). Don't exactly know how you came up with DDNS though when it's about ACME/LetsEncrypt certification methods :)

          But it seems I have found the option although it's labelled misleadingly as "acme-dns.io" (a service provided by the app's creator) instead of simply ACME-DNS (the app itself, that can be self-hosted).

          I'll have a look if it supports your own service but at first glance it seems possible. Just the naming that caused the issue of thinking it was just another cloud or hosted service.

          Cheers

          Don't forget to upvote πŸ‘ those who kindly offered their time and brainpower to help you!

          If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

          J 1 Reply Last reply Reply Quote 0
          • J
            jrey @JeGr
            last edited by

            @JeGr said in ACME DNS API support:

            was not talking about DDNS but about the ACME package

            no mention of DDNS here by me.

            Acme is updating my DNS, and obtaining the LetsEncrypt certificate, no issues
            All with settings from the supported GUI. No other changes.

            Clearly you are doing something else

            JeGrJ 1 Reply Last reply Reply Quote 0
            • JeGrJ
              JeGr LAYER 8 Moderator @jrey
              last edited by JeGr

              @jrey said in ACME DNS API support:

              Clearly you are doing something else

              Antworten

              Yep, you are on a totally different path. I was asking about ACME and acme.sh's DNS providers. That RFC2136 is working for you is nice, but has nothing to do with the question :)

              Like previously suspected, it seems the "acme-dns.io" selection is indeed the acme-dns tool from GitHub and you can enter your own hosted instance. It had a few rough edges but worked finally, so seems to work like expected - we will see if renewal works fine, too.

              Don't forget to upvote πŸ‘ those who kindly offered their time and brainpower to help you!

              If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.