Re: acme-client agreement url in 6.3

2018-09-02 Thread flipchan
Awesome thanks

On September 2, 2018 9:57:48 AM UTC, Stuart Henderson  
wrote:
>On 2018-09-02, flipc...@riseup.net  wrote:
>> Hey all, 
>>
>> i cant be able to get acme-client to work in 6.3 .
>>
>> i get the same error with  agreement url as
>> "https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf;
>and
>> "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf;
>>
>> their is a error on his site,
>> https://github.com/kristapsdz/acme-client-portable/issues/51
>> Does anyone know what agreement url is offically supported/works with
>> openbsd 6.3?
>>
>> server# acme-client -vv mail.example.com   
>> acme-client: "agreement url" is deprecated.
>> acme-client: "agreement url" is deprecated.
>
>Just remove "agreement url", it's no longer used in 6.3.
>
>> acme-client: acme-client: acme-client:
>> /etc/ssl/private/mail.example.com.key: loaded RSA domain
>> key/etc/acme/letsencrypt-privkey.pem: loaded RSA account
>> key/etc/ssl/mail.example.com.crt: certificate valid: 120 days left
>
>This looks like it's worked.

-- 
Take Care Sincerely flipchan layerprox dev


Re: acme-client agreement url in 6.3

2018-09-02 Thread Stuart Henderson
On 2018-09-02, flipc...@riseup.net  wrote:
> Hey all, 
>
> i cant be able to get acme-client to work in 6.3 .
>
> i get the same error with  agreement url as
> "https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf; and
> "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf;
>
> their is a error on his site,
> https://github.com/kristapsdz/acme-client-portable/issues/51
> Does anyone know what agreement url is offically supported/works with
> openbsd 6.3?
>
> server# acme-client -vv mail.example.com   
> acme-client: "agreement url" is deprecated.
> acme-client: "agreement url" is deprecated.

Just remove "agreement url", it's no longer used in 6.3.

> acme-client: acme-client: acme-client:
> /etc/ssl/private/mail.example.com.key: loaded RSA domain
> key/etc/acme/letsencrypt-privkey.pem: loaded RSA account
> key/etc/ssl/mail.example.com.crt: certificate valid: 120 days left

This looks like it's worked.




acme-client agreement url in 6.3

2018-09-01 Thread flipchan
Hey all, 

i cant be able to get acme-client to work in 6.3 .

i get the same error with  agreement url as
"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf; and
"https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf;

their is a error on his site,
https://github.com/kristapsdz/acme-client-portable/issues/51
Does anyone know what agreement url is offically supported/works with
openbsd 6.3?

server# acme-client -vv mail.example.com   
acme-client: "agreement url" is deprecated.
acme-client: "agreement url" is deprecated.
acme-client: acme-client: acme-client:
/etc/ssl/private/mail.example.com.key: loaded RSA domain
key/etc/acme/letsencrypt-privkey.pem: loaded RSA account
key/etc/ssl/mail.example.com.crt: certificate valid: 120 days left

server# cat /etc/acme-client.conf   
 
#
# $OpenBSD: acme-client.conf,v 1.4 2017/03/22 11:14:14 benno Exp $
#
authority letsencrypt {
agreement url
"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf;
#"https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf;
#"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf;
api url "https://acme-v02.api.letsencrypt.org/directory;
#"https://acme-v01.api.letsencrypt.org/directory;
account key "/etc/acme/letsencrypt-privkey.pem"
}

authority letsencrypt-staging {
agreement url
"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf; #
"https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf;
#"https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf;
api url "https://acme-v02.api.letsencrypt.org/directory;
#"https://acme-staging.api.letsencrypt.org/directory;
account key "/etc/acme/letsencrypt-staging-privkey.pem"
}

domain mail.example.com {
   domain key "/etc/ssl/private/mail.example.com.key"
   domain certificate "/etc/ssl/mail.example.com.crt"
   domain full chain certificate
"/etc/ssl/mail.example.com.fullchain.pem"
   sign with letsencrypt
   }
#   

Take Care
Sincerly flipchan